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ABSTRACT . — 

These four papers were presented as background at a 
national symposium exploring the relationships among l>aw, ethics, and 
technology as they relate to the individual's informational privacy. 
George B. Trubow's "The Development and Status of 'Informational 
Privacy' Law and Policy in the United States" discusses 'privacy as it 
relates to the collection, use, or disclosure of personal 
information . Trubow covers relevant common law and court decisions, 
fair informational practices, federal and state privacy laws, and 
eight questions about privacy that need resolution. Alfred R. Louch's 
"Morality and Privacy" ponders, the philosophical, social, and moral 
bases of the concept of privacy. Fred W. Weingarten's "Information 
Technology and Privacy Trends in Products and Services" surveys 
likely developments in information technology over the next decade 
that will probably affect individual privacy. Weingarten identifies 
more tfian 14 trends in technological developments afid in their 
effects at the individual level, at home, at work, and in broader 
social services. Finally, in "A Taxonomy for Privacy," Willis H. Ware 
proposes a framework within which to consider privacy litigation and 
legislation. Ware discusses the concepts of physical, visual, aural, 
and Recordkeeping space and suggests defining "invasions" of these 
spaces rather than defining privacy itself. (Author/RW) 
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PREFACE 

The papers published here were prepared to provide 
the background for discussions at a National Sympo- 
sium on Personal, Privacy and Information Technol- 
ogy held in the Faltof 198L Sponsored jointly by the 
American Bar Association's Section of Individual 
Rights and Responsibilities and the American Feder- 
ation of Information Processing Societies, the Sym- 
posium was made possible by a gran from the Na- 
tional Science ^Foundation and the National Endow- 
ment for the Humanities. 

- £ fhe purpose of the Symposium was to explore the 
relationships between Iqw, ethics and technology as 
relevant to the informational privacy of the indi- 
vidual. The report of that Symposium, published 
separately by the American Bar Association, pre- 
- sents the findings and recommendations distilled 
from three days of discussions among the 24 experts 
gathered for the Symposium. 
The background paper** are published separately as 
' general resources on law and policy with respect to 
¥ informational privacy, the relevance of morals and 
ethics to concepts of privacy, jand the effects on 
privacy that may result from the rapid growth of com- 
puters and information technology. A word about the 
authors may be helpful. 

George B. Trubow has-been professor of law at the 
John Marshall Law School, Chicago, since 1976. He 
} holds A.B. and J.D. degrees from the University of 

} Michigan, [hiring the administration of Gerald Ford, 

I ■ Professor Trubow was general counsel to the Commit- 
! tee on the Right to Privacy, Executive Office of the 

President, and prior thereto he was deputy counsel to 
a subcommittee of the U.S. Senate Judiciary Commit- 
' tee, and director of planning for the Law Enforcement 

I Assistance Administration, U.S. Department of Jus- 

tice. Professor Trubow was corrector of the Sympo- 
1 sium for which the papers were prepared, and he has 

* directed other projects on privacy for the American 

Bar Association. 

Alfred R. Louch is professor of philosophy and 
chairman of the Philosophy Department at Clare- 
mont Graduate School. He was 'educated at the Uni- 
versity of California, Berkeley/ B,A- (1949), M A. 
* (1951) and Cambridge University, P!i.D. (1956), where 
he held a Rhondda Open Research Studentship at 
Gonville and Caius College. He has also taught at the 
Berkeley, Loe Angeles and Riverside campuses of the 
University of California, Oberlin College and Syra- 
" cuse University. Professor Louch is the author of Ex- 
planation and Human Action and is completing a fur- 
ther book, Power and Right. He has published numer- 
ous articles and reviews in the philosophy of behav- 



ioral sciences, action theory, and moral and legal 
philosophy. He serves on the editorial board of Social 
Theory and Practice, Philosophical Investigations, 
and Humanities and Society. Professor Louch recent- 
ly completed a four-year term on the California Coun- 
cil for the Humanities in Public Policy and has served 
on committees to set up Law and Society and Legal 
Studies programs .at the University of California, 
Riverside and at the Claremoht Colleges. In the Sum* 
mer of 1981, he taught a National Endowment for the 
Humanities seminar on the right to privacy to 4 college 
teachers. In addition to teaching in the education, 
business and criminal justice departments, he cur- 
rently directs a Dual Degree Program in humanities 
and management 

Fred W. Weingarten, then with Information 
Policy, Inc., was a consultant in privacy, computer 
security, and information policy. He received a M.S. 
degree in applied mathematics and a Ph.D. degree in 
mathematics and computer science from Oregon 
State University. Dr. Weingarten spent seven years 
at the National Science Foundation developing and 
managing a program to support research on com- 
puters and public policy. He also served with the staff 
of the Privacy Protection Study Commission, repre- 
sented NSF on the State Department Task Fohce on 
Transborder Data Flow, and consulted for the Com- 
mittee on the Right to Privacy (Executive Office of 
the President-Domestic Council). Dr. Weingarten is 
currently Program Manager, Communication and 
information Technology for the Office of Technology 
Assessment of the U.S. Congress. 

Formally educated in engineering, Willis H. Ware 
has long been concerned with the impact of computers 
and information technology upon society, and as early 
as the mid-1960s had begun writing and discussing 
his views on computers as a growing social force. He 
thus combines the sensitivities of a social scientist 
with the nuts-and-bolts knowledge of a technician. 
With the Rand Corporation since 1952, Dr. Ware has 
progressively been a member of the research staff, 
head of the Computer Sciences Department, deputy 
vice-president for Project RAND (U.S.A.F.) and is 
currently with the Corporate Research Staff. His 
areas of expertise include military information 
systems, technical assessment of Soviet computing 
technology, and nearly 30 years of interaction with 
the U.S. Air Force, the Department of Defense, and 
other federal agencies. Dr. Ware was vice-chairman of 
the Privacy Protection Study Commission. 

George B. Trubow 
Principal Investigator 
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The Development and Status of 'Information Privacy 
Law and Policy in the United States 



by George B. Trubow* 

Introduction 

Privacy is a notion that has attracted considerable 
attention in this country during the past fifteen 
years; 1 the went! hgs 6een used broadly to characterize 
claims involving matters such as the use of contra* 
ceptives, 2 the choice for abortion, 3 freedom from 
telephone wiretaps 4 and the confidentiality of 
financial records kept by banks. 5 Such broad refer- 
ences to "privacy" obscure the nature of the interest 
and contribute to difficulty in defining it Almost 
everyone talks about "privacy" but no one seems to 
know exactly what it is. The principal purpose of this 
paper is to "discuss the development and status of ' 
privacy mainly as it relate^ to the collection, use or 
disclosure of personal information, an aspect of 
privacy especially important to what has been charac- 
terized as the modern "information society/' 6 

Much of the recent concern about privacy has re- 
sulted from the phenomenal growth of computer use, 
which has made it possible to collect, manipulate and 
disseminate personal information in dimensions 
never before contemplated. 7 People are worried about 
who has information about them, how it was obtained 
and to what uses it will be put A national survey con- 
ducted by Louis Harris and Associates for the Sentry 
Insurance Company has been frequently cited as indi- 
cating the degree to which Americans are concerned 
about privacy and the growth of information tech- 
nology. 8 The survey reported that 64% of all 
Americans consider the present use of 'computers tq 
be an actual threat to personal privacy, and indeed 
53% of those surveyed in the computer industry 
agreed 9 "If privacy is to be preserved, the use of 
computers must be sharply restricted in the future," 
was the opinion of 63% of the survey sample, and 75% 
said that a right of privacy should be of equivalent 
stature to the inalienable American rights of life, 
liberty and the pursuit of happiness. 10 Arthur Miller 
warned of ~The Assault on Privacy" in 1964, and the 
public is increasingly aware of the vast quantities of 
personal information gathered and shared by federal, 
state and local government, as well as the private 
sector. The Watergate scandal served to accentuate 
fears bbout the federal government, though personal 
information held by any entity can constitute a 
privacy threat Almost every person who has a 
mailing address is the recipient of "personal" letters 
from Unknown or* surprising sources. Though there' 
seems to be significant public consensus' that 
"privacy" is important and in jeopardy, there is no 
general agreement as to what the reasonable 
expectations of informational privacy ought to be. 

• 

•George B. Trubow is Professor of Law at the John 
Marshall Law School, Chicago, Illinois. 



To provide clarity in the ensuing discussion, some 
words and phrases should be explained. Personal 
information is defined as any information that can be 
referred to a specific individual by name, number Or 
other identifying characteristics. Consequently, it is 
not the content of information which makes it 
personal but rather its reference. The notion of "infor- 
mation privacy'' can be divided into these com- 
ponents: (1) What personal information is collected; 
(2) The circumstances in which someone can see per- 
sonal information; and (3) How the personal informa- 
tion is protected. The terms justification, classifica- 
tion and protection can be used to characterize these 
three components of "informational privacy. 1 ' 

Justification. All too often, personal information is 
collected or kept without careful evaluation as to 
what information is really necessary for the record's 
purpose. Information id not an end in itself, it is a 
resource used in making decisions. When information 
in a file is justified, the recordkeeper has been dis- 
criminate in choice and has determined that a par- 
ticular piece of personal if formation is proper and 
necessary to the purposes and objectives of the file. If 
program objectives are specific and understood, infor- 
mation systems managers should be able to account 
for why and how each item of program information 
has been collected and kept 

Classification. Once information itself has been 
justified, those who may have access to that informa- 
tion should be identified and the circumstances for 
access described. Confidentiality is defined by clas- 
sification which establishes disclosure protocol. 
Classification is a principal concern of information 
policy because the question of who can see personal 
information is frequently a central issue in privacy 
. disputes. 

Protection. This involves the avoidance of un- 
authorized alteration, disclosure or loss of informa- 
tion. Once information has been classified, the degree 
of protection afforded will depend upon the kind and 
degree of r^sk attendant upon unauthorized access to 
that information. The safeguarding of data is a matter 
of security technology and procedures and is not 
within the principal focus of thitf paper. 

The ensuing discussipn is organized as follows: it 
begins with a summary of the relevant common law of 
the United States regarding the statu* of privacy 
prior to 1964, including reference to the common law 
of defamation, which also deals with information about 
individuals. The effect on the relevant common law of 
Supreme Court cases in 1964 and thereafter describes 
the constitutional basis for privacy in the United 
States. Next will follow a discussion of information 
privacy as characterized by 4 * fair information 



practices'* proposed in recent federal studies and a 
brief survey of current federal and state statutes that 
protect personal information. (Because the purpose of 
this paper is to map the general contours pf informs- - 
tional privacy as recognized in this country, it does 
not present a detailed legal analysis.) The discussion 
will conclude with a list of issues that this writer 
believes must be resolved in the development of a 
comprehensive information privacy policy. 

Relevant Common Law Prior To 1964 

The Development of " Privacy" 

% A concept of privacy is not part of the English com- 
mon law and was not specifically recognized in early 
American law. The idea of a legal ' right to privacy " 
was presented in 1890 in a law review article by 
Samuel D. Warren and Louis D. Brandeis: 

''Political, social and economic changes entail the 
recognition of new rights, and the common law, in 
its eternal youth, grows to meet the demands of 
society Instantaneous photographs and news- 
paper enterprise have invaded the sacred precincts 
, of private and domestic life; and numerous mechan- 
ical devices threaten to make good the prediction 
that 'what is whispered in the closet shall be pro 
claimed from the housetops/ For years there has 
been a feeling that the law must afford some remedy 
for the unauthorized circulation of portraits of pri- 
vate persons; and the ev if of the invasion of privacy 
by the newspapers / M } 

Warren and Brandeis argued that, though not spe- 
cifically designating it as "privacy," courts had in 
fact recognized such an interest. The authors declared 
privacy to be "a part of the more general right to 
the immunity of the person, the right to one's person- 
ality / M * They borrowed the phrase, "the right to be 
let alone/' from Judge Cooley 13 and used it to charac- 
terize the nature of privacy. Unfortunately, that 
phrase has been used repeatedly to describe privacy, 
but it does not precisely define the concept Being "let 
I alone" can ahfb describe the interest violated by such 
t^rls as assilult. battery, false imprisonment and tres- 
pass to property, which were really the context for 
Cooley s use of the phrase. Warren and Brandeis did, 
however, undertake to define more narrowly the 
boundaries of privacy: 14 

• Privacy does not prohibit % publication of matters 
considered to be of general public interest. 

• The same privileges of publication as apply in 
defamation also apply to privacy. 

• A right to privacy ceases when th£ individual 
himself consents to or causes the publication of 
personal information. 

• Privacy can be violated even if the information 
published is true. 

Within these constraints, the right to privacy was, 
identified as protecting-an individual against the un- 



warranted publication of his * name or picture* or of 
sensitive personal information. 1 - 1 

Professor William L. Prosser 16 and the Restate- 
ment of Tofts 17 gave further impetus'to the develop- 
ment of privacy. These authorities built upon the 
Warren and Brandeis analysis and defined four kinds 
of privacy which they said had been recognized in the 
common law: 

Intrusion upon physical solitude or seclusion, This 
involves unreasonable intrusion into an area wherein 
one has a reasonable expectation of being undisturbed. 
Most of the cases recognizing this tort involve a phys- 
ical entry by the intruder similar to property trespass, 
but eavesdropping, peeping into windows, repeated 
telephone calls and spying with binoculars or cameras 
have also been considered^ privacy intrusions. Though 
there Have been a few instances in which unwarranted 
prying into personal information or affairs was "con- 
sidered intrusion, that has not been the generally 
recognized thrust of this specie of the tort. 

Public disclosure of private facts. This tort prohib- 
its unreasonable publicity given to private informa- 
tion in which the public has no legitimate interest and 
tracks very closely the kind of privacy summarized 
above with which Warren and Brandeis were, con- 
cerned. This privacy interest could be invaded even if 
the information disclosed was true. 

Publicity placing one in a false light in the public 
eye. The gravaman of this tort is an affront to per- 
sonal dignity, but it is difficult to distinguish it from 
defamation (discussed below) which protects reputa- 
tion. .Also, unlike the prior tort, but as in defamation, 
this privacy interest is violate^ only by the publica- 
tion of false information. 

Appropriation of one's name or likeness for the 
commercial benefit of another This also was a prob- 
lem identified by Warren and Brandeis and is the first 
privacy tort formally recognized by common law in 
the United States. This interest is sometimes pn> 
tected by statute, in which ca^e it is usually restricted 
to appropriations for commercial gain (such as prod- 
uct advertisen^ents), though the common law often 
included non-commercial benefits achieved through 
use of name or picture to assert or imply an endorse- 
ment (e.g., support for a political candidate). 

The publication-of-private-fact tort has most rele- 
vance to the confidentiality of personal information; 
intrusion into seclusion may be relevant to how infor- 
mation is obtained and is an informational privacy 
tort only if prying into personal records is recognized 
as an "intrusion." The appropriation tort addresses 
unauthorized publicity, and is more related to prop- 
erty rights than to informational privacy. For all 
practical purposes, ''false light*' privacy is indistin- 
guishable from defamation. 

There is little uniformity among the states as to 
which of these four privacy torts is recognized and 
what limitations may apply to any one of them. 
Neither Prosser nor the Restatement has helped to 
clarify "privacy" by grouping these four disparate 
interests under the same rubric, And informational 
privacy as difscussed in this paper is not adequately 



addrt&sed tfy "common law privacy" in the United 
States described by Warren and Brandeis. Pros9er ¥ 
or the Restatement It is important to remember the 
two privacy torts that do relate to the publication of 
information — publication of private facts and false 
light publicity —because it is the publication aspect of 
the torts that invite the conflict with First Amend- 
ment protection of speech and the press, to be dis* 
cussed later in this paper. 

Common Law Defamation 

The common law of defamation is relevant to infor- 
mational privacy b**cause defamation involves the r 
publication of false information that injures reputa- 
tion. Further, the line of Supreme Court coses begin- 
ning in 1964, which places limitations on common law 
defamation, is deemed to apply to privacy whenever 
publication* of information is an element of the tort. 
At commorf law defamation is the publication of false 
facts that injure another's* reputation by subjecting 
him to hatred, shame or ridicule in the community. 1 * 
It was the falsity requirement that initially avoided 
conflict with the Constitution, because the Supreme 
Court held early on that the First Amendment pro 
tects truth, but not falsehood. 1 * 

Whether the defendant realized he was telling a lie 
about a specific person was beside the point; common 
law defamation often brought harsh results by assess- 
ing liabilityfor a statement which had not been appre- 
ciated as defamatory and for which there was no 
reason to suspect falsity In a famous English case, 
the defamation was about a fictional character created 
in a story written by the defendant, when lo and 
behold, a plaintiff with the same name as the fictional 
character appeared and sued (interestingly, plaintiff 
was a lawyer!): the defendant was held liable for the 
defamatory statement^ A similar result has been 
reached in the United States, where one court said. 
The question is not so much who was aimed at as 
who was hit." 21 

To summarize the status in 1964. of what loosely 
might be called "informational privacy law." and 
remembering that there are considerable variations 
among the several states regarding recognition of and 
the elements for various torts, these generalizations 
are permissable: 

1. There was liability in damages for publishing a 
defamatory' falsehood, perhaps even if the publisher 
was innocently unaware that the information was 
false and defamed a specific person. 

2. There could be liability for publishing informa- 
tion which, though not defamaiory. placed the plain- 
tiff in an objectionable false light in the public eye. 
(This privacy tort is difficult to distinguish from def- 
amation and seems almost to have been swallowed 
by that tort.) 

3. To publish embarrassing or sensitive private 
information in which the public had no legitimate 
interest was a violation of privacy even if the infor- 
mation was true. 



"Informational Privacy" Law 
Subsequent to 1964 

In 1964. the Supreme Court decided the landmark 
case of New York TiMes v. Sullivaru™ in which a 
public official (Commissioner of State Police) allegedly 
had been defamed by falsehoods. The Supreme Court 
held that there cbuld be no liability for defamatory 
falsehoods about a public official unless the defendant 
knew th^t the publication was false or displayed reck- 
less disregard as to whether the publication was false. 
In subsequent cases, the Supreme Court extended the 
"deliberate or reckless falsity" requirement to public 
figures 23 as well as public officials, saying that such 
individuals voluntarily seek the limelight and are 
better able protect themselves against defamatory 
falsehoods than are ordinary citizens. Whether or not 
one agrees with those reasons, the court does protect 
publishers from the self-censorship that can result 
from the strict liability imposed by common law 
defamation. The court made it clear in Sulliyafi 
that the Constitution protects falsehoods in some cir- 
cumstances to encourage free and open debate and 
comment. 

In 1974. the Supreme Court decided Gertz v. Robert 
Welch, Inc., 1 * wherein plaintiff lawyer had been 
defamed in a publication of the John Birch Society. 
The court held that the plaintiff was not a # public 
figure nor public official and that, as an ordinary citi- 
zen, did not have to meet the "deliberate or reckless 
falsity" test required in Sullivan, but did have to 
prove that the defendant was at least careless with 
regard to the falsity of the publication. There is dis- 
agreement as to whether Gertz applies only when the 
defamation defendant is of the news media; the opin- 
ion is unclear on this point and the states are divided 
on the issue. 25 Though the Sullivan and Gertz cases 
address defamation, it is considered that they also 
control privacy when publication is an element of the 
tort. Two Supreme Court cases dealing specifically 
with privacy are worth noting in this respect: 

In Cantrell v. Forest City Publishing Car* the 
court reviewed a "false light" privacy invasion, 
wherein the parties to the case accepted the Sullivan 
test as applicable. The Supreme Court said, referring 
to Gertz, that the question remained open whether a 
less rigorous standard than Sullivan would apply to 
false light cases, suggesting that privacy will be con- 
trolled bv cases limiting defamation. 

Cox Broadcasting Corp. v. Cohru r * introduces per- 
plexing privacy problems. That case involved the 
publication of private fact in Georgia, where the 
defendant had published the name of a rape victim, 
contrary to a state statute specifically prohibiting the 
publication of such information. The court ruled that 
because the name of the rape victim had been found 
by the defendant on the criminal indictment, a public 
document made available during the trial, publication 
of that information constitutionally could not be pro- 
scribed. Though the narrow holding of the court was 
that M states mav not impose sanctions for the publi- 
cation of truthful information contained in official 



court records open tcpublic inspection/' the court did 
state that "the interests in privacy fade when the 
information involved already appears on the public 
record/' 28 Though an indictment was the specific 
"public record" before the Court, the case opens the 
question whether, constitutionally, informational 
privacy rights cease once personal information has 
become available to' the public. In some instances at 
common law, information probably not actionable 
when published because it was newsworthy and of 
general public interest at the time, was held action- 
able when dredged up again 10 or 20 years later. 29 It is 
not clear whether those cases of necessity are now in 
- conflict with Cox. Additionally, the majority opinion^ 
in Cox specifically mentioned the matter of truth as a 
defense po the tort action and declared that question 
open. Clearly, if the First Amendment is interpreted 
as protecting all truthful information, then this com- 
mon law tort of publication of private fact will be 
effectively eliminated. For informational privacy to 
survive, the Supreme Court must decide that in some 
instances the publication of truthful information can 
be penalized. 

In summary, and with the same caveat previously 
applied to such generalizations, subsequent to 1964: 

1. There is no longer strict liability, to news media 
at least, for defamatory falsehoods. For liability, 
there must be at least carelessness as to truth and 
perhaps deliberate or reckless falsity, depending on 
who is the defamation plaintiff. 

2. Information gleaned from official public records 
cannot be the basis of privacy actions. It is not 
clear now whether information from unofficial 
sources available to the public is also constitution- 
ally protected, or whether information once on the 
public record is forever after in the public domain. 

3. The Supreme Court has not decided whether all 
truthful information can be published, regardless 
of source, content or utility. The survival of in for- - 
mational privacy depends upon the enforceable 
confidentiality of certain truthful information. 

Constitutional Basis for 
Informational Privacy 

The foregoing d!5&ission addresses common law 
privacy, as limited by x First Amendment constraints. 
The Constitution of the United States has itself been " 
the source for privacy rights, apart from the common 
law. in instances involving abortion, the use of contra- 
ceptives, wiretaps and the reading of pornography. 30 
Rights of "personal autonomy*' in certain decisions, 
and freedom from government interference, have been 
the focus of these privacy claims; accordingly, they * 
are not on point as to informational privacy. 31 The 
Supreme Court has been asked to expand constitu- 
tional, privacy broadly into information policy areas 
and thus far has refused. 

In the case of Paul v. Davis,* 2 the defendant, a local 
police chief, had circulated tagpwti merchants a bulle- 
tin which carried the pictu^s and names of individ- 
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uals identified as "active shoplifters." The plaintiffs 
picture was in the bulletin; he had been arrested on 
suspicion of shoplifting but the charge had been 
dropped and he was never prosecuted for the offense. 
The plaintiff brought an action alleging violation of a 
constitutional right. of privacy. The Supreme Court 
noted that "constitutional privacy" thus far had 
recognized rights "fundamental to the concept of 
ordered liberty/' said the -case at bar was not within 
those "zones/* and refused to extend the concept of 
privacy to this particular matter wherein a police 
chief was performing a function related to his official 
duttes. 33 The plaintiff was left to rely upon state laws 
of defamation or privacy for redress. ^ 
m The precise thrust of this case regarding privacy 
thus far has not been refined or clarified. Some com- 
mentators argue that Paul v. Davis is a barrier to 
constitutional protection of p right of informational 
privacy; others interpret the case narrowly as dealing 
with procedural due process and Suggest that avenues 
remain open for constitutional privacy development. 
Because privacy is nowhere specifically mentioned in 
the Constitution, and because of the specific protec- 
tion of speech and press in the First Amendment, it is 
probably safe to venture that in the foreseeable future 
Congress or the states must be looked to for develop- 
ment and protection of informational privacy. 

Privacy and Fair Information Practices 

Information policy has received attention in forums 
other than the judicial system. A government report 
In the early 1970s often has been cited as the first 
major contribution to the development of a rational 
policy framework for the collection, management and 
use of personal information. That report, "Records, 
Computers and the Rights of Citizens/' was issued in 
1973 by a Special Advisory Committee to the Secre- 
tary of Health, Education and Welfare and was the 
result of a comprehensive study of personal informa- 
tion kept in federal computerized data banks. 34 The 
report noted the significant growth of the use of 
computers to process information and proposed a set 
of*"fair information practices** whose purpose was to 
enhance personal privacy by protecting the confi- 
dentiality of personal information. These principles 
may be distilled as follows: 36 

1. Collect only that personal information neces- 
sary for a lawful purpose. 

2. Use for decision-making only data that is rele- 
vant, accurate, timely and complete, 

3. Give the data subject access to information 
about himself, and a procedure by which to chal- 
lenge and correct the information. 

4. Use data only for'the purpose for which it was 
collected. 

5. Protect the data against unauthorized loss, 
alteration or disclosure. 

It' * 



Though often regarded aH the foundation for per- 
Sonal information privacy, these are sensible rules for 
the management of any information system; their 
relevance to privacy policy will be considered shortly. 

The Privacy Protection Study Commission, estab- 
lished by the Privacy Act of 1974,^ (discussed below) 
also conducted a thorough and comprehensive study 
of public and private record systems and issued some 
166 specific recommendations to enhance irfforma- 
tional privacy. While acknowledging the soundness of 
the foregoing principles, the Commission identified 
three "objectives'* of good information practice: (1) to 
minimize intrusiveness into the personal affairs of 
citizens; (2) to maximize fairness to individuals in the 
way personal information is managed, and 13) to legiti- 
mize expectations of the confidentiality of personal 
information |: It is probably more accurate to view 
these as suggested constraints on information prac- 
tice, rather than , objectives, because arguably the 
main objective of information is to provide a valid 
basis for decision-making. It does seem sensible that 
personal information should be collected and used in 
conformity with these constraints " . 

The Commission s constraints ("objectives") and 
the HEW principle's are compatible and relate to the 
five components of information privacy: 

• Principle #1 relates to justification— assuring 
*that information is necessary to a legitimate 

purpose. The effect of this principle is to limit 
the amount of personal information collected, 
and privacy threats are diminished when the 
collection of personal information is restricted, 
The principle also responds to the avoidance of 
intrusiveness. 

• Principle #2 is also a facet of justification. Deci- 
sions can be no better than the informationmpon 
which they are based. Stale or irrelevant infor- 
mation may be useless, and incorrect or incom- 
plete data can be dangerous. This principle also 
promotes fairness by encouraging that decisions 
be based upon sound data ^ 

• Principle #3 pertains to classification in that it 
addresses access by the data subject. The prin- 
ciple also promotes fairness since the, data sub- 
ject can learn what information is being used to 
make deeisions^that affect him. It also aids in 

{ justification regarding the accuracy and com- 
pleteness of information because the data sub- 
ject should be able to validate information 
pertaining to him, 

• Principle #4 relates to classification by limiting 
use of and access to information and establishes 
expectations of confidentiality, It also promotes 
fairness by avoiding surprise, especially when 
data has been gathered from the subject or other 
source who disclosed it because of the specific 
purpose for which it originally requested. 

• Principle #5 is clearly related to protection. 



A difficulty in applying these information prin- 
ciples, results from the shifting perspective of those 
dealing with information. The eecordkeeper, the data 
subject and those who seek access , to information 
about others each have differing viewpoints regard- 
ing justification and classification. .It seems to be 
basic human nature that when one asks a question he 
wants to know everything that njay be related to the 
inquiry, while one answering a question about himself 
prefers to supply^Ss little personal information as 
possible. Each of the participants in the process of 
gathering and using information prefers to be the 
judge as to what is necessary to the purpose. 

Because information is not an end in itself, the 
fashioning of principles or procedures for the manage- 
ment of information • must necessarily take into 
account the specific objectives of a record system and 
the nature of the decisions which must be made. The 
variables regarding individuals, and information 
system objectives make it difficult to fashion a 
generally applicable information policy, which is why 
the Privacy Protection Study Commission found it 
Necessary to make system-by-system recommenda- 
tions. But, if there are no principles, then there can be 
no privacy. If principles are sufficiently clear, it will 
be much easier for the data subject, the recordke^per 
and third parties to agree Iwpon reasonable confiden- 
tiality expectations. Current policy formulation is 
insufficient to provide adequate guidance. 



Federal, Laws 

Outside the reshaping of the common law resulting 
from application of Constitutional constraints, Con- 
gress has acted to regulate^information by specific 
legislation. It must be remembered fdso that Execu- 
tive Department regulations which have the force of 
law, may supplement statutes or implement enabling 
legislation. The^ capsule summaries that follow are 
sketchy, but they do set out the thrust of significant 
laws primarily concerned with the protection of per- 
sonal information. 

Fair Credit Reporting Act {1970)** This was the 
first federal legislation to regulate personal informa- 
tion maintained by the private sector The FCRA 
requires that credit investigation and reporting 
organizations make their records available to the data 
subject, provide procedures for correcting infor- 
mation, and permit disclosure only to authorized 
customers. 

Crime Control Act of 1973. This legislation re- 
quires that state criminal justice information sys- 
tems developed with federal funds be protected by 
measures to ensure the "privacy and security" of 
information. The Law Enforcement Assistance 
Administration was authorized to promulgate imple- 
menting regulations and did so in 1975. The regula- 
tions impose some restrictions on the dissemination 
* of criminal history record information, though each 
state is expected to develop programs to manage and 
protect its criminal justice information. 



Privacy 4 4ef of 1974 40 This was the firSt compre- 
hensive legislation to protect the confidentiality of 
personal information stored by federal agencies. The 
law provides access by data subjects, requires pro- 
cedures for the correction or amendment of chal- 
lenged information, and limits disclosure to third 
parties 

Family Education Rights and Privacy Act of 1974 * x 
This Act, popularly referred to as the Buckley Amend- 
ment, requires schools and colleges to grant students 
(or their parents) access to student records, provide 
challenge and correction procedures, and sharply 
limit disclosure to third parties. 

Tax Rejbrm Act of 1976 1 4 * This law includes protec- 
tion for the confidentiality of individual tax returns, 
limiting third party disclosure primarily to federal 
and state tax authorities. 

Right to Financial Privacy Act of 1978.™ This legis- 
lation provides .bank customers with some privacy 
regarding their records held by banks and related 
institutions. This law was in response to the Miller 
case, wherein the Supreme Court held that account 
records maintained by a bank are not the client s 
' papers, but rather are business records of the bank. 
Consequently, the records were not protected by the 
Fourth .Amendment and the customer was not allowed 
even to challenge third-party access to such, records. 
The Court said further that customers do not have an 
expectation of privacy regarding bank records. The 
RFPA creates an expectation oP^rivacy by providing 
procedures whereby federal agents can gam access, 
though the law does not cover state or private sector 
third-party inquiries to banks. 

Privacy Protection Act of 1980 1 44 This was another 
Congressional response to a court decision, this time 
the Stanford case, wherein a search warrant was held 
to be a proper means for law enforcement agents to 
•gain access to the files of a newspaper publisher. This 
1980 law limits the procedures by which law enforce- 
ment authorities can see a newspaper's records or 
files. 

Electronic Fund Transfer ,4cf of 798ft 45 Pursuant 
to this law, any institution providing electronic fund 
transfers or other bank services must notify their 
customers about third-party access to customer 
accounts. EFT A does* not provide specific privacy 
protections, however. n 

The 96th Congress had before it a variety of meas- 
ures introduced by the Carter Administration that 
would have regulated medical, insurance and employ- 
ment* information. None of those proposals was 
enacted, and they have been reintroduced in the 97th 
Congress but have received little attention. 

Note on the Freedom of Information Act of 196& 4 * 
The purpose of this Act is to make federal records 
available for public inspection and copying, on the 
theory that the goverhments business is everyone's 
business. There are a series of specific exemptions 
from the law s disclosure requirements, one of which 
is for discloeures that would be a clearly unwarranted 
invasion of privacy. 47 This exemption is designed to 
deal with cases in which a government record may 



pertain to an individual other than the one making the 
inquiry. It is frequently said that FOIA and privacy 
are in basic conflict, since the? former seeks to open 
records to everyone, while the latter tends to clos^ 
records except to' the data subject. Though citizens 
deske free access to information about the way their 
government is doing' business, arguably some govern- 
ment records deserve to be kept confidential in defer- 
ence to the interests of the individual identified 
therein. Balancing the public 'right to know" against 
an individual's desire for privacy is the tricky task 
facing federal agencies and courts when there is dis- 
agreement regarding the propriety of disclosure. 
Though, of course, there is a necessary relationship 
between information privacy policy ^nd access to 
"public" records, discussion of the extensive FOI A 
litigation is beyond the scope of this paper 4 * ^ 

State Laws 

State legislatures also have supplemented common 
law protection by providing a variety of specific 
information confidentiality guarantees. 4y Only a 
handful of states have enacted any one of the various 
privacy protections discussed below.. Most states do 
have public records lawjs, their oWn brand of FOIA, 
and the same conflicts are encountered here as in the 
federal arena 

Criminal justice, medical and tax records .receive 
attention by many states. 60 Alrqost every state has 
. developed a plarj consistent With the LEAA regula- 
tions for criminal histories, though they usually pro- 
vide minimum confidentiality by restricting disclo- 
sure only of simple arrest records when'there has been 
no disposition within a year following arrest.* 1 
Conviction records are usually not restricted, and it is 
common for data subjects to have rights to inspect 
and challenge recorded criminal history information. 
A majority of states provide confidentiality to mfedl- 
cal arid tax records, ^respecting * the aoctor/patient 
. relationship and the financial privacy of the taxpayer. 

Less than 20 states protect the confidentiality of 
bank* records in parallel to the federal law, and a 
similar number have provisions to supplement FCR A 
protection. 1 ^ Likewise, a handful of states protect the 
confidentiality of school records. 53 though the per- * 
vasiveness of the Buckley Amendment probably 
reduces the need for such legislation at the state level. 

About 20 states have some sort of general privacy 
law. either in constitution or statute, 54 but on the 
whole such measures are narrow and relatively insig- 
nificant Information privacy thus far has been a 
popular subject for state, inquiry, though there is not 
much legislation to show for it. Xt j 

The National Conference of Commissioners of Uni- 
form State Laws, in 1980. approved # the draft of a 
Uniform Information Practices Code. 56 That proposal* 
includes both FOIA and privacy provisions, each, 
modeled tergely after the federal acts. The major 
* benefits of She draft are that it makes FOIA and 
privacy more compatible in implementation, it avoids 
some of the problems experienced at the IN@ral level* 




anil it provides a brood and comprehensive basis for 
managing ^formation held by state and local govern- . 
me^t. The UFIPC draft does, not seek. to regulate 
information in the private sector, however. r* 

Whatever inay be the bounds of privacy defined by 
various federal and state case precedents, statutes or 
regulations, the potion does not have an intellectual 
foundation; what doctrine there is appears the result 
of emotion, value perception and whose ^x^gored 
rather than because of any rational limits <$!ruisclo- 
sure of personal information based on reasonable and 
rtforceable expectation. Even the generally accepted^V 
principles" of fair information practice are subject to 
claims of exception and exclusion whenever applied to . 
ipny particular information system. 4 Those rules are 
good for himhut not for me . . is a frequent judg- . 
ment renfierai by an information system manager. 
Federal and sjbate executives, legislatures and courts 
promulgate or declare more or less privacy, but they 
have produced a patchwork guilt and not a pattern 
fabric woven from the fiber of consistent and uniform 
interests. 

Though the pursuit of a rational j framework for 
informational privacy policy is itself a sufficient 
challenge and contains enough issues to command the 
attention of even the most astute analysts and theor- * 
ists, there are specific questions of. implementation 
regarding any policy that ipay be devised. It does 
appear, to thfs writer, at least, that society is not yet 
willing to a&ept an "open information" concept 
whereby there are no constraints on dissemination of 
accurate and sensitive personal information. Accord- 
ingly, evfen though the current concepts of informa- 
tional privacy are nebulous and variant, some per- 
plexing questions must be resolved to adequately . 
monitor and protect whatever there is that already 
exists: i 
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Can and should information poHta regulate the 
information practices of private' individuals? 
The various principles which have been dis- 
cussed were fashioned for government ipr regu- 
lated business, but not for that individual who 
may have a personal computer at home in hiA. 
bedroom or den. The age of the microcomputer 
makes available to the general public, relatively 
powerful information processing resources at 
small cost Virtually anyone who can operate a 
typewriter can manage a personal computer, 
and for as little as $500. National data banks, 
accessible by personal^-eemputers, makes the 
question all the more/pressing; the possibility of 
"data havens' 1 maintained at home by an 
employee who would not be permitted to keep or 
use that information at his office presents addi- 
tional problems for monitoring and regulation. 

What should be the criterion for triggering a 
privacy claim—tangible injury to the individual, 
or simply the outrage and emotional distress 
resulting when private information is wrong- 
fully disclosed? Should privacy be protected in 



the Warren/Brandeis notion of "inviolate per- , 
sonality'Vor only in a property context when 
there has been commercial or pecuniary harm? 

Is privacy an aspect only of natural individuals 
(as is the* current law)ior do corporation^ have 
"privacy" too? Privacy in the personality sense «. 
is difficult to envision for corporations, though 
privacy as property is relevant to the protection • 
of a business entity. ' 

If there is to be regulation, when is federal/state/ 
self regttlation appropriate or desirable? The 
tmvat^ s^tor provided virtually no informa- 
tional privacy until the federid government 
threatened, although the Privacy Protection 
Study Commission has urged that in most cases 
the jfcivate sector be left to its own measures of 
responsibility. There are some notable examples 
of corporate self-regulation* -such as IBM and 
Aetna Insurance, but these are the exceptions 
and not the rule, 

Vtoiat sort of regulatory agency, if any, should 
be established to monitor and protect the infor- 
mation interests of individuals and society? 
\^ien the Privacy Act of 1974 was enacted, 
pressure from the White House discouraged ^he- 
creation of a separate agency or bureaucracy to 
oversee implementation of the Aifct. Information 
is power, and*who will watch the watchers? On 
the other *hand, Congress wig uncomfortable 
with a prografn that would depend upon volun- 
tary agency compliance enforced only by private 
civil actions, so the Office of Management and 
Budget was given minima! oversight responsi- 
bility with little regulatory authority. (The 
UFIPC includes an optional information policy 
agency with not much power or authority,.) 

How can press responsibility be assured? As in 
the time of Warren and Brandeis, the press is 
frequently accused and apparently guilty of 
excesses in the publication of persgnal informa- 
tion. Considering 'that dftyone who can run a 
Xerox can disseminate news, it is not realistic to 
consider the press only in terms of the New York 
Times or the Washington Post What about the 
National Enquirer? The electronic media pose 
the same problems, and size and general respect- 
ability of major networks is' no guarantee. What 
about 20/20 or 60-Minutes? 
fcbnsTder the single identification number, a u 
proposal with the unfortunate acronym of SIN r 
Everyone would have one identifying number, 
carefully assigned and always used; there are 
negative and positive factors. On the down side, 
such a number allows the easy linkage of infor- 
mation from any number of files and sources, 
and Orwell's Big Brother looms in the distance 
(1984 is just around the corner!). On the up side, 
however, is the convenience and accuracy of 
such a number; it can virtually eliminate infor- 
mation mixups and make it possible to quickly 
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sort and assign data Are the threats of SIN real, 
* or can technology render it a gentle giant that 
facilitates fair information practice? 

• Should the needs of criminal investigation and 
law enforcement require* a general* exclusion 
from information confidentiality? Congress has' 
considered several comprehensive criminal 
*" justice privacy bills during the past decade, but 
has not agreed on any proposal save the ex- 
tremely general mandates of the 1973 Crime 
Control amendments, referred to above. Specific 
confidentiality enactments usually have broad 
exceptions for law enforcement purposes, as in. 
the Privacy Act of 1974, and seem to contem- 
plate a special law to deal with the peculiarities of 
criminal justice. Because it is difficult to predict 
when an otherwise apparently routine or benign 
hit of personal information may assume critical 
importance in a criminal investigation, special 
exceptions to confidentiality may be appropriate. 

It is not pretended that this list exhausts the issues 
attendant upon* a rational information policy, but 
they are some of the more immediate and important. 
An information policy could be rational without reso- 
lution of those questions, but it would be difficult to 
regard the policy as comprehensive or adequate if 
many of these gaps remain. - r - 
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Morality and Privacy 



by Alfred R. Louch* 

Is privacy a moral concept? Perhaps the question is 
premature. We should ask first whether it is one con- * 
cept or applies by a series of puns across a wide range 
of doubtfully related instances, 
• TJiink of the variety of cases where it is said to have 
-been invaded: the peeping torn, the wire-tapper, the 
policeman's too energetic pursuit of inc rim i n a t i n g evi- 
dence through rectal and vaginal searches, the ex- 
traction of blood, the recording of personal financial 
• transactions. Think also of the various places, posi- 
tions and relationships in which privacy is suppoeec} to 
reside: the bedroom and bathroom, or any part of one's 
house, the telephone booth, the glove compartment or 
trunk, the concealment afforded by bushes on other- 
1 - wise public ground, the bond and what is entailed by it 
between spouses or lovers, families or friends, profes- 
sionals and clients/ 

Some of these cfyses focus on the alleged intrinsic 
* wickedness of surveillance, some on the bad manners ^ 
(at least) of those who disturb and annoy their neigh-" 
bore. Others call to mind the need for seclusion to pur- 
sue certain legitimate, and indeed virtuous, projects. It 
would be tempting tot say that all these cases share a 
common ^conception of the fact or condition of privacy: 
being unobserved by anyone who has not been explicit- 
ly invited to share one's company or activities. But, as 
lawyers and law-watchers have come to use the term, 
even that definition must be strengthened to justify 
not just the right to do certain thingsf unobserved, but 
thfe right to do them at all. 

The key here to the semantic confusion is the verb 
u to justify." Like other cases of contested meaning in 
the law (including the word "law" itself) the extension 
of the concept of privacy is entangled in the issue of its 
propriety. We aren't willing to say this or that area is 
private untjl we are assured that it ought to be. So we 
all know what privacy is— we know it when we're en- 
joying or suffering it, or looking for it, but we don't 
know whether Katz in his- public telephone booth, or 
Griswold in his consulting room is in it in some 
justifiable sense. • 

I propose, therefore, to begin at the other end, and 
talk first about the justification of privacy, and allow 
its scope to emerge by inadvertence. But here I have 
two options, to tease out my, and I hope your, intui- 
tions on privacy intrusion, or to formulate abstract 
moral theories, with^a view toward testing their possi- 
ble implications for the justification of privacy, and the 
charting of its domain. Right off, one might suppose 
there to be a match between one's rudimentary descrip- 
tions of privacy and the structure of the two sub- 
stantive ethical theories still in circulation: utilitarian 
and Kantian. Whatever else, privacy, is spoken of as 
something prized. One wants to be left alone, one 
craves solitude, and to discover that one has been spied 
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on, or to hear broadcasted the details of one's personal 
life is a source of injury. So these wants and injuries go 
into the utilitarian balance. But, alas, so do other 
values that, as it happens, conflict with these 
acknowledged desires. Surveillance and data collection 
turn out to be ne^taary, or soat is believed, if one is to 
have security agmnst assault, theft or fraud. A limita- 
tion on one's personal space is a condition of civilized 1 
life. So one must rank the competing values, not a prob- 
lem to which utilitarians have found the solution. Their 
calculations depend on the commensurability of the 
values measured. But privacy's competitors— security, 
the right or the need to know— do not find a plac^ 
above or below privacy on a single scale of desires. So 
we are reduced to consulting our intuitions in par- 
ticular cases, 

The Kantiato view is at first moi^ promising. It 
rests on a principle of respect for persons. I conform 
my conduct to this principle only if I treat others as 
ends, not as means. If I lie to others, I treat them as 
means; I manipulate them for my own ends. So, if the 
state (and likewise, the individual) engages in surrep- 
titious surveillance, if it frustrates the* life-plans of the, 
heterodox by laws prohibiting contraception, abor- 
tion or drug addiction, if it collects data as a means of 
extending its control oVer citizens, It may be said to 
be violating the Kantian condition of morality. On 
this view, the concept of privacy is hard to distinguish 
from the concept of morality in general. Privacy is, as 
it were, the way of being treated morally. To respect 
persons is to respect their privacy. My claims to 
privacy is my request that you treat me with respect. 
This point of view, in its grand sweep, makes all but ir; 
resistable the ideal of an anarchic human condition, in 
which noble savages respect each other without the 
coercive goad of the state. Philosophers as different as 
ftobert Paul Wolff and Robert Nozick find themselves 
in or near that state, as for them respect for persons 
means that no action against the will of another is 
morally permissable at all. 1 In consequence it, is diffi- 
cult to imagine how one can go to the doctor -and pre- 
serve one's status as a moral being. * 

Kant was far from endorsing such a consequence of 
this theory. He assumed a state capable of enforcing 
moral duties. The instruments of enforcement will, by 
definition, violate the autonomy of individuals. So, he 
and all proper Kantians after him, must draw a line 
between permissable and impermissable intrusions 
on the person. The areas oLknpermissable intrusion 
may be called the area of privacy, but equally, the area 
of autonomy. Privateers, if I may call them so, will be 
disappointed at such a consequence. They want a par- 
ticular area of immunity.identified as private and jus- 
tified accordingly. The mere facts of intrusion or the 
reduction of autonomy will not suffice, since they will 
allow cases in whictf observation or coercion serve 
legitimate and overriding social purposes. They may 
say that no sufficiently important aim is served by 




e 



ERIC 



prohibiting contraception, that, setting aside the per- 
sonhobd of the fetus, no other legitimate aims favor 
the criminalization of abortion, but that, on the other 
hand, patrolmen may take blood samples from uncon- 
scious or protesting but palpably drunk persons, in 
the inti£est of highway safety, or that the police may 
bug a public telephone fromXwhich a bookie conducts 
his business. These judgments take into account the 
importance of preserving the social order, an aim tjjat 
may be of greater significance to the individual than 
personal autonomy. So the area of privacy will have to 
be charted in the light of acknowledged utilities as 
well as out of respect for persons. Some of these 
utilities will be responsive to other needs and in- 
terests of individuals— for security, equal treatment 
and the availability of goods. Others will relate in- 
directly to those aims, by endeavoring to secure the 
institutions necessary to protect them. With order, 
autonomy in Kant's sense is limited; without it, 
autonomy may be impossible altogether. 

This means that we cannot expect moral theories to 
tell us what we want to know. They serve father to re- 
mind us that in arriving at social decisions we ac- 
knowledge these formal constraints; we want at least 
to remember that we ought to respect persons but not 
so as to imperil the future, we ought to work towafti 
maximum benefits, but without totally submerging 
individual dignity. And we shall be especially mindful 
of the sobering fact that by trying to respect persons 
we may be implicated in policies that in some way 
abrogate or invade autonomy or privacy. (The signifi- 
cance of this remark will appear at the end.) I am per- 
suaded that this perspective on moral theory clouds 
the distinction between principle and policy that 
Dworkin has used to such effect in Taking Rights 
Seriously 2 arid subsequent pieces. More to the point 
here, it suggests that the only available procedure' in 
testing the moral force of claims to privacy is to con- 
stflt our moral intuitions, informed to be sure by Kant 
and Mill, but riot deduced from the claims to be found 
in their moral theories. I propose now to appraise the. 
various types of privacy sketched earlier in just this 

waw # ... 

I begin with confidentiality because the primitive 
force in the promise to keep a secret is so obvious, and 
the strains on principle at the same^ time so palpable. 
At issue are the fundamentaTideas of trust and be- 
traval, close to the heart of our>mord v intuiti2ns'tad to 
Kantian ethics. Nonetheless, these forceful irituitions 
do not exclude counter-cases where, for example, 
keeping a promise endangers a life. In professional 
cases of confidentiality, it is argued that the useful 
function of the relationship with priest, therapist, 
doctor, attorney or newspaperman will be frustrated 
by divulgence. Setting aside the confessional which in 
our way of thinking has a different source of protec- 
tioh in the wall between church and state, this argu- 
ment depends on the assumption that certain forms of 
counselling or investigation serve an important pur- 
pose in society. Counselors hear the uninhibited an- 
xieties and aggressions of their clients, and so assist 
in venting them and possibly contributing to an 
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understanding of them as well. Newspapermen are 
able to expose graft and corruption in high and power- 
ful places only by using informants ^ who would say 
nothing without the assurance of confidentiality. We 
recognize the moral obligation but may find in con- 
flicting needs and interests reasons to divulge infor- 
mation as to a future crime, or to aid in the defense of 
a criminal suspect. Dworkin s easy answer to Farber, 
that the use of informants is a matter of policy,, the 
most efficient way oj collecting information, is in fact 
not easy at all, unless* one is quite sure the obligatory 
functions of the press are possible without the net- 
work of informants. This is a factual question to 
which I do not have the answer, but it is the answer 
that must be given before we weigh the rights of 
newemen against those of criminal Suspects. Morality 
turns on the nature of facts in most complex cases, 
even if the facts are not known. They may often be 
construed as moral problems because the facts are not 
known. 

The therapist claims not to know when patients 
intend and when they only express violence. Their cli- 
ents, they say, constantly talk aggressively, and were 
they obliged to warn in every such case, their words 
would have the effect of the boy who cried wolf, or, if 
believed, move the informed to counter-violence. 
Again, the facts are not clear, but their weight would 
contribute to the overall judgment of the legitimacy 
of breaking a confidence. 

What is imparted in confidence has the character of 
a secret. Could we discover and chart the private by 
recounting secrets? What is divulged in confidential 
meetings will often be information about a person 
which otherwise would not be divulged at all. The 
special relationship encourages a sense of intimacy 
that matches, possibly goes beyond, that between 
husband and wife, parent and child, friend and friend. 
Thoughts, feelings, fantasies are revealed that from 
shame to guilt, or other causes, patients cannot con- 
front themselves. One may wonder why people are 
compelled to blab their secrets, but I assume we need 
not take the court's point of view in Lovisi that 
revelations to someone else deprive the activity 
divulged information of its orivate status. We want to 

* say of these confidentially communicated matters 
something which may be hard to say in law, that what 
they reveal to the therapist or priest are facts and feel- 
ings that constitute them as persons. It is their iden- 
tities they choose to share for various extraordinary 
reasons. W«pme to one source of the private here, 
not because^ the professional relation to the confi- 
dant, nor because^of a promise given, but because 

- what is said bares the soul. Love, jealousy, despair, 
grief— none are emotions that thrive in company. If 
others are present they must be there by invitation, as 
professionals or intimates. The TV cameraman and 
interviewer callously probing the bereaved s feelings 

» about their lost loved ones are unwanted and uncon- 
scionable intruders. » 

Now this train of thought began with confidenti- 
ality as a special case of legitimate barriers to disclo- 
sure. But it ends wjth the conception of the personal, 
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or the intimate, a way of being or doing that cannot 
flourish in a fish bowl. But this idea, even if it can be 
made dear, does not cover the entire range of cases in 
which privacy has been advanced to block covert or, 
coerced information gathering. The bookie taking and 
placing bets on his own or a public telephone, the war 
protester attending a political rally, the average per 
son cashing and depositing checks are not in any of 
these activities revealing their emotional states or 
most intimate thoughts. They are doing business or 
making public statements and in the main with 
strangers. In all these cases there may be a good 
reason to shield the individual. We fear the exercise of 
police power and so wish to limit the extent and, 
methods of surv eillance. One, perhaps the only; feas- 
ible way of ensuring such limits, is to insist that 
searches be based on the reasonable suspicion that 
evidence will support specific allegations. A more 
extensive use of that power alters the relation be- 
tween the state and the individual. Surveillance can- 
not be extended very far without subverting the 
moral ideal of a populace governed in the main by 
internalized conceptions of right and wrong, good and 
bad. Such a regime replaces moral motivation with 
fear and coercion. (Notice again the Kantian concep- 
tion of the moral agent at work here.) I think it is at 
least plausible to argue, against the prevailing 
tendency, that unrestricted bugging, by which I mean 
the monitoring of all telephone calls over a period of a 
day or a week, moves too far in the direction of gener- 
alized search. The same could be said for FBI 
, surveillance and picture taking of political rallies, or 
for the collection of all data on financial transactions. 
But one need not invoke a right to privacy to draw 
this conclusion. And it would be odd to do so, if our no- 
tion of intimacy is a guide to the use of the concept. 
Attending a political rally, for example, is public and 
is meant to be. We deplore its surveillance, not 
because it brings to light personal secrets, but 
because surveillance is the first stage in a plan to 
punish or suppress political convictions. It is the pur- 
pose of collecting and storing information that defines 
it as an invasion of personal rights. 

1 suggest we turn back to the vague conception of 
privacy emerging, or should I say emanating, from 
the account of confidentiality. What has emerged, or 
emanated, is the sense that a meaningful life depends 
On the capacity to enter into emotional relationships 
that exclude outsiders. And we may as well add at 
once that it depends too on theppportunity to derive 
the strength and self-confidence for the stresses of 
public life through retreat into solitude. But one is 
tempted to substitute for this compelling but vague 
idea some objective counterpart that could serve bet- 
ter as a legal criterion of tjie private zone. This is the 
temptation to resort to visible things and places: the 
body, the home, perhaps the office, the automobile, or 
its trunk, the locker, the bank vault There "at least we 
know where we are: the trouble* is we don't always 
know with what right we are there. What I have in 
mind is best illustrated by the claim to the immunity 
of the body. Two models are particularly tempting 



here. The first is the privacy accorded to bodily func- 
tions—specifically sexual and v eliminative functions. 
This cannot mean, however, that bodily functions is 
such are private. W f e do not take the same view, 
though some cultures may, of eating; we take a less 
private view of urinating than defecating, and so onl 
So it is not the body that is privileged, but the act! 
One would be hard put to explain why we taboo some! 
acts and not others. But if we did not invest that kind' 
of significance in Some acts, our moral concept of 
respect for some persons might well be empty. It 
must be filtered through sensitivities of this sort to 
have any content at all. (Just as the concept of malice 
OEcrime needs the concept of harm or taint to find ap- 
portion.) The bodyitself, or parts of it, may be said 
to be tabooed. But again, the taboo, at least in our 
culture, does not turn on the conception of the body as 
personal, but because it, or parts of it (the private 
parts), signify acts whose public performance would 
be offensive, a breach in morality or manners. 

The second model depends on the fact that intru- 
sion on the body entails coercion. The police, believing 
that a suspect has swallowed the evidence, chokes 
him or forcibly a4jninisters an emetic/ Suspecting 
that a prostitute has secreted a razor in her vagina 
(private parts) they pry into body cavities. They ex- 
tract a blood sample from an unconscious or a pro; 
testing automobile driver suspected of drunkenness/' 
Are these inadmissible invasions^of the body's sanc- 
tuary? I think not. What offends us all in the Rochin 
case is not the fact that the evidence was in his body, 
but that it required unconscionable and brutal proce- 
dures to get it out. Imagine that evidence could have 
been supplied by X-ray. The mere fact that the article 
is inside the body is not the limitation on such a 
search. Similarly, 4 blood tests or body cavity searches 
fail to support the idea of the body as an inviolable 
place. The location of evidence in these cases, as in 
Rochin, improves the individual's chance of resisting 
disclosure or seizure. The body is, after all; the object 
most nearly under the control of the will. So body 
searches are more apt to Occasion coercive methods of 
• recovery. Blood under the fingernails, fingerprints, 
particles in the hair can be occasions for more direct 
confrontation of police and suspect than the body 
buried in the basement or the woods. We confuse that 
kind of confrontation and its implications for coercive 
and brutal search with the claim to bodily sanctity. 

Much that is said of the body applies with diminish- 
ing impact to other enclosed spaces— the house, the 
car trunk or glove compartment, perhaps too the 
thicket in the woods. 8 They can be viewed as barri- 
cades that one can man, and so invite cqpfrontation 
and its coercive consequences that threaten abuses of 
police power. Some of them can also be viewed'as the 
' settings necessary to perform bodily functions in a 
way consonant witl^ public standards of decorym. All 
of thentf can serve as ways of shielding any activity 
from which we choose to exclude the public. Enclosed, 
shielded spaces are imposed on us as a duty— hence 
the very strong sense of a right to seclusion within 
them. They are also respected more broadly as the 
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means to nourish and enrich the interior life— hence 

the exacting requirements for police intrusion. 

Do these observations point to a spatial— a topo- 
logical— conception and a definition of privacy? If so, 
do they point toward ownership or title as a means of 
defining the zone? In spite of Brandeis,* earlier courts 
looked at it this way and failed to find it, I would 
agree. The physical shield may, after all, be a publicly 
provided sanctuary. It is not implausible to suppose 
that public telephones, at least of the old-fashioned 
kind no longer to be found in modern airports, are 
sanctuaries of just this sort. Private property is one 
way of making it possible to be private, but it is not 
the moral justification for privacy. In this respect it is 

; like the body, which also, as a detached self-activating 
organism, affords another opportunity to be private. 
Our discussion would be moot if our minds were tele- 
pathically open to one another and so it would be if 
we lacked opaque walls and blinds behind which to 
live and act out of the public gaze. If we believe that 
private places are necessary to our flourishing as 
moral persons, we may find artificial aids— walls, cur- 
tains, hedges— as necessary to this aim as our clothes 
or skins, or separate nervous systems. 

i harp on this theme of bodily privacy to block art 
least one inference commonly drawn from it. This is 
the move from the metaphysics of the body (if I may 
put it so vaguely) to claims of property rights in it. It 
is, we say, my body, after all ~ presumably in 
response to being hectored for one s smoking, over- 
eating, or dissipation. A particular instance of that 
line 0f thought has played a mischievous role in dis- 
cussions of abortion. It has been urged that because 
the fetus is in the woman's body, and dependent upoh 
it the decision to abort is entirely hers, whether the 
fetus is a" person or not. !u This suggests a right of 
disposal which has nothing to do with privacy, and 
besides, may encounter rough weather conceived as a 
property right. There is nothing in the concept of 
ownership that overrides any possible public interest 
in the thirtg owned. If one abuses one s body, it is not 
implausible to say that one's care of it is not by any 
means unconnected with one's responsibilities to 
those who may have a legitimate interest in its 
healthful condition. So too in the abortion case. The 
whereabouts of the fetus do not decisively block the 
public interest. Whether othpr considerations work 
against {iublic interest in the fetus is another matter. 
But the idea that the fetus is the mother s flows from 
a conception of motherhood as a responsibility and a 
major k M&i % of her life. On that view it would be in- 
coherent to appeal to the discomforts of pregnancy, 
and the loss of a preferred life-style as grounds for 
abortion. For that way of talking alienates mother 
andtfetus, opening the door to the public interest as 
much as it closes it. The property interest does not go 

. through the body, but through a possibly atrophying 
sense of the intimacy of a relationship. But the way # in 
which the fetus is the mother's entails a kind of per- 
sonality to the fetus that, in the interest of liberalizing 
abortion laws, the courts and feminists have been at 
some pains to deny. ^ 



So the body and, along with it, the home are thus 
means of protecting something else, not the thing to 
be protected. If we then ask what it is we mean to pro- ^ 
tect as private, the answer that may satisfy our moral * 
intuitions may trouble our legal scruples. We extoll 
intimacy, the kind of life than can only flourish given 
separate nervous systems, clothing, walls and hedges. 
We believe something essential to the quality of life is 
lost if we can t Jet down our guard, alone or anym'g 
chosen*intimates. That answer accords to the indi- 
vidual a central plaice in our scheme of values and 
duties. Self-identity and self-esteem depend, we 
believe, on an interior life as well as on public roles and 
achievements. There must be time apartf as well as 
time together, tranquility as well as activity. Within 
this conception certain actions and relationships hold 
a prominent, if culturally contingent place, symbo- 
lized in physical terms by bedroom and bathroom, 
and the clothing of private parts. I say culturally con- 
tingent because we know that the shape of the private 
world alters under the pressure of relative senses of 
decorum, of prudery and modesty. Our standards of 
decorum are not only ours, they are in flux; that is 
why the concept of the private is so hard to specify. So 
one turns to half-baked theories of individuality and 
seeks at least partial sketches to the private realm by 
claiming that certain actions and relationships are^ 
' essential to it. The sexual life is our leading candidate. 
,It is both customarily private and, as Orwell noted in 
1984, the last bulwark of individuality against an 
omnipresent collectivity. This is the moral intuition 
that supports Griswold and Eisenstmct Prohibitions 
of contraceptives touch a couple in their most in- 
timate moments. 

This intuition, however, does not carry us very far. 
It affirms sexual privacy with such particularity that 
it affords little basis for analogy. It does, however, 
give rise to three concluding observations: 

1. Griswold privacy needs to be looked at in the 
coAtext of a mental health ethic, to which unimpeded 
sexuality is the core. Any obstacle to that end 
threatens the wholesome and valued relationships of 
married partners or lovers. This is why Douglas is 
able to carry forward his line of thought to Doe v. 
Bolton, where pregnancy and the unwanted child are 
seen as frustrating the life-style of the. mother. 
Whether it is a good thing to sever act and conse- 
quence in this way is a deeper matter, but this is what 

1 a mental health ethic does. It strongly implies that 
unhappiness is always a sign of a redeemable mental 
or moral lapse. 

2. The vague, disjointed area of privacy running 
from sexual intimacy at one end to simple tran- 
quility— the right to be left alone—at.* the other is a 
bourgeois ideal. It depends on detached houses, sur- 
rounded by fence anfl hedge, separated from the 
neighbors. This is the natural setting for moral 
theories that rest on an individualist basis. It is not a 
condition, however, that could be said to be shared, 

» even to a minimum degree, by the urban poor, even in 
societies hke ours that affirm the virtues of privacy. It 
is also quite absent from the life of the Kalahari 



Bushman or the Brazilian Indian/" for whom the con- 
cept of privacy as we use it is unintelligible. If the 
respect for privacy is a cultural and historical 
phenomena, the question naturally arises as to its 
future prospects. Is it an ideal that is possibly out of 
phqtse with the social realities of our time? It demands 
space where we lack space, individuality where we 
desperately require cooperation and sociability. 
Perhaps we have tried to articulate the ideal in law at 
the moment of its passing, If so, it is understandable 
that we should find the concept perplexing. But it 
would also reflect on tjiose abstract mflral theories in 
'which the concept of privacy Finds a comfortable and 
an exalted place. The value of privacy or the duty to . 
respect it are intelligibleohly in the light of a prevail- 
ing conception of a life worth living and within the 
constraints of a life that our relative affluence makes 
possible, 

3* Our world has changed in another way that 
bears more directly on the theme of information 
privacy Information technology, as the contributions 
to this conference by our electronic experts makes 
clear, can potentially and radically alter our modes of 
interacting .with others at home and in the market- 
place. If I cash a check, in the frame of mind to which I 
have been habituated from my youth, *I have no 
thought for this act as other than a momentary 
though useful transaction. If I am conscious that 
cashing the check will be somehow lodged forever as 
an available item of information about me, I must 
come to think of it differently. And this difference in 
attitude has hothing to do with embarrassment or 
some deeper distress at the revelation of a deeply per- 
sonal aspect of my being, The shock to me is not that 
this transaction is known by my wife, employer or the 
FBI, but that the retrieval of this trivial moment in 
my day s business implies that mV life as a whole is on 
public view, This shock is fundamental. It goes 
beyond the question of legitimate uses of information 
within a particular form of political order. I find, in 
contemplating such a potential reality, that my idea 
of myself as an individual has undergone radical 
transformation, as it would were I to discover that my 
belief in the opacity of walls, clothes or skin had all 
along been mistaken. 

John YYyndham invites us to enter such a changed 
personal world in his science fiction tale, The Midwich 
Cuckoos. The strange children in this story, who are 
incubated in terrestrial mothers through impregna- 
tion *by an other worldly parent, have telepathic 
powers. Each of them thinks, knows and feels what all 
the others think and feel. Are they individuals, in our 
sense? The separateness that allows us the lukury of 
our private' thoughts is not available to them; nor 
would it be to us if each detail of our public lives were 
preserved forever in a retrievable form, This is not an 
assault on our civil liberties, but on the concept of 
ourselves as discrete persons, on which all civil liber 
ties and legal institutions generally depend. , 

This is what makes the issue of information privacy 
intractible. The potential of information retrieval 
O systems reaches to every conceivable act; but our con- 



ception of ourselves as individuals is still nourished 
by our capacity for internal soliloquy, private 
thought. That capacity seeks confirmation in the 
guarantees of an arena of private, unreported action. 
Information systems eliminate those guarantees. Of 
course, we can imagine someone like the hero of Jack 
London 's The Star Rover, who, though in solitary con- 
finement, manages by sheer will to create and sustain 
a fantasized individual life. But iii prizing individual- 
ity, we^ureK' mean more, or lean, than this. We do not 
suppose that we are required to affirm ojur individual- 
ity heroically, but acknowledge that independence 
and autonomy are frail and easily extinguished 
qualities of mind and life. They require protection and 
insulation. A totally open society strips us of these 
guarantees. * 

On the other hand appropriate guarantees appear 
to require a degree of regulation that Would portend 
for many the opposite evils of a closed society. Control 
of information appears to be possible only in the 
design of the hardware, and this entails currently 
unorthodox measures for the regulation of private in- 
dustry. Perhaps our guide here should be such ven- 
tures as we have made into the control of industry- 
created, pollutants. In this case, as in privacy viola- 
tion, the striking fact is that individuals who stand to 
bp harmed, are willing participants in the processes 
that br^ng the threatening condition about. Most of 
us want the technology'; it makes life easier for us. 
Similarly, most of us consume pollution-related prod- 
ucts avidly and sometimes unavoidably. So we can- 
not quite construe the problems we have in this area 
as a conflict between business practices and indi- 
vidual rights. A fish bowl society threatens us in basic 
ways: its control will be contrary to our political ancj 
legal traditions. But perhaps we have moved a stage 
forward When we recognize how intractible the 
problem is. 
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Information Technology and Privacy 
Trends in Products and Services 

by Fred W. Weingarten* 

Introduction 

Privacy is fax from a new problem. As an issue in 
this country, it dates back to colonial days and earlier. 
Furthermore, since the privacy issue concerns, in 
part, the collection and distribution of information, it 
has always been affected by developments in informa- 
tion technology— the printing press and the camera, 
to name just two. 

Thus, we will state two hypotheses: (a) The informa- 
tion revolution we are entering may have a profound 
effect on our notions and rules regarding privacy, (b) 
resulting problems will have deep historical and 
roots that will inform our response as a 
society. ^SChis meeting is an attempt to understand 
future challenges to privacy— the nature of the con- 
flicts that will shape the ultimate choices we make 
le responses available to us. 
to begin this process, it is necessary" to 
the information technology that* will surround 
> next decade or two This task iathe purpose 
of this paper. It is a job with severe constraints and, 
before proceeding, the limitations of such an analysis 
must be underscored 

A Warning 

Scrooge asked the Ghost of Christmas Future if the 
shadows he was shown were of those events that 
would occur or that could occur. The distinction is im- 
portant Technologists can tell us about the potential, 
not about the choices we will make in using that 
potential Therefore, if this paper says that a device or 
an application is technologically possible, such a 
statement does not necessarily constitute a prediction 
that it will occur. * 

This caveat is especially important to keep in mind 
with regard to sections of the paper on data collection. 
We have a fairly good notion of certain trends in infor- 
mation technology. We also know to some extent 
what hardware and software computer science is pre- 
paring for us in the laboratory and what manufac- 
turers are dreaming about in their board rooms. 
However, we know less about the future desires of the 
marketplace and the nature of the laws and regula- 
, tions that will govern how information is used 

We need also to keep in mind a more general wattl- 
ing made by the sociologist Daniel Bell in several of 
his writings. It is not necessarily technology that im- 
pacts society for good or bad but its uses, which are, 
in turn, shaped by the values of the society and by the 
historical context in which the technology is used For 

•Dr. Fred Weingarten was President of Information Policy, 
Inc., Washington, D.C. and is now Program Manager, Com- 
munication and Information Technology* Office of 
Technology Assessment, U.S. Congress. 



instance, many issues regarding individual rights sur- 
round the use of criminal justice systems, but the 
nature of their use, when computerized, is shaped by 
centuries of law enforcement traditions and attitudes. 

The National Criminal Information System <NCIC), 
run by the FBI, is far different from a comparable 
system that would be designed to operate in the 
Soviet Union, or even in another democracy such as 
Britain. The sQcjotaHimpact of the NCIC system, 
then, is dependent not merely on the nature of modern 
computer and communications hardware; but on the 
design choices made during its implementation and 
its uses by the criminal justice .community. 

This warning preface is intended to encourage a 
critical perspective on the part of the reader in reacting 
to what may appear to be a rather chilling picture of 
the future, a picture in which the capacity of the 
technology to collect, store, analyze, and distribute the 
most personal information about ourselves appears to 
be nearly limitless. We are not trapped helplessly in 
front of an unstoppable technoltjgital steam-roller, 
however, much will be required to live with the results 
of our decisions regarding its use. 

The Approach 

Since this description of technology is intended to 
support the discussions of this workshop on privacy, 
four guiding principals have shaped the analysis to 
that end: 

1. The paper focuses on the products and services 
that are likely to be available. 



Most technological forecasts in the area of informa- 
tion technology dwell oh the remarkable trends in the 
basic technology itself— how the new pieces of silicon 
created by the microelectronics industry compress 
enormous capability into microscopic space at 
bargain prices. 

These trends are indeed noteworthy, but, with a few 
exceptions, they do not directly relate to privacy. Of 
greater importance are the ways in which these tiny 
chips are incorporated into the environment sur- 
rounding us. As an extreme example: if the 
automobile industry was to absorb the total produc- 
tion of microcomputer chips over the next decade, our 
task would be made easy, Although the automobile 
industry will, in fact, use a lot of chips over the next 
few years, a large number will be left over for other 
purposes, some of which this paper will explore* 

2. The forecast is be "surprise-free"— it assumes 
that most of the information technology that will 
be commercially available over the next decade 
exists now, at least in the laboratory. 
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This type of forecast is most common, and it is 
justified for two reasons: (a) It keeps the policy 
analysis, which is at best a slippery exercise in uncer- 
tainty, at least fixed at its starting point (b) The 
length of time required to find an application for a new 
basic research discovery and to market it widely 
usually exceeds the period of analysis. 

3, The forecast emphasizes those* characteristics 
of the new products and services that seem to have 
privacy intplications. 

In particular, we will be concerned with potential 
users of the technology:, the environment in which it is 
used, and its characteristics in terms of the collection, 
storage* transmission, or manipulation of personal 
data. |No judgment is implied about the sensitivity, 
utility, or potential for harm from misuse of any par* 
ticular type of personal data) 

One interesting characteristic we will examine that 
is often ignored is the potential of a computer applica- 
tion to create a new market for personal data We 
often hear computer users say, "Sure, that capability 
to invade privacy exists, but there is no incentive to 
collect such data 4 ' However, some new computer ap? 
plications—for example, systems to predict jufy:^ 
voting behavior— may, in fact, create markets for per- v 
sonal data that would provide such an incentive. * 

4. The paper assumes no legislative or market bar- 
riers to the development and production of applica- 
tions and services. 

.Although certain applications could be considered 
damaging and be outlawed, or particular types of in- 
formation services could be delayed by antitrust rul- 
ings in the courts and so on, this paper assumes a per 
missive atmosphere. More importantly, although 
many industry experts are making grand predictions 
about the growth of the information service industry, 
the possibility remains that consumer resistance or 
indifference could stifle the growth of the market. For 
example, twenty years ago the nuclear power in- 
dustry would not have predicted the combination of 
popular resistance and regulatory restrictions that 
has hampered its growth. 

General Trends 

A number of general trends in information 
technology affect our view of services and products 
Available in any specific environment Many of these 
fh?nds result from the marked drop in price and the 
availability of microelectronics hardware. 

1. Products that contain computers will be more 
prominent than computers themselves. 

This trend, resulting from the low cost of computer 
hardware, means that, rather than selling general 
k computer systems, manufacturers will sell complete 
J packages designed tq do specific tasks— for example, 
word/ processors or sophisticated sales terminals for 
retail stores. These systems do not require that the 
purchaser be an expert in computer systems. With the 
low price of computers, computer manufacturers 



make money in only two ways: (a) selling hardware 
already equipped with expensive software and (b) in- 
creasing their volume of &ales. T6 sell more products 
to a population not completely composed of computer 
experts, companies must sell systems that don't re- 
quire sophistication. This observation leads to the 
next. 

2. Computer products will be mass produced. 

A large variety of computer-based products will be 
used by people in many walks of life. This point is im- 
portant to note since some effects of smaller 
computer-based app&^tions on privacy may depend 
upon widespread use. 

3. Computers, communications, and * other infor- 
mation technology are becoming intej»pted. 

The so-called merging of computers and com- 
munications is often interpreted in the press to mean 
that computers and communications can no longer be , 
distinguished. This conception is attributable to the 
development of more complicated information ser- 
vices that use both computers and data communica- 
tions. If companies like IBM and AT&T^vere content 
to make computers and carry signals over wires 
respectively, there would be no problem. However, 
both companies choose to sell the new information 
services, which represent the real pipfits in the in- 
dustry. The integration of computers and communica- 
tions will magnify the privacy problems in the 1980s 
and thereafter. 

4. The nature of information storage is changing. 

In the last few years, the cost of storing information 
electronically has becqpie competitive with the cost of 
using paper. Before, the chief motivation for putting 
data in electronic form was that it would be processed 
on a computer or transmitted. 

Now, the change in economic incentives will greatly 
increase the nature of information regularly stored in 
electronic form. Furthermore, it will reduce the incen- 
tive for system operators to purge old information 
from their data bases. 

5. The market for information is growing. 

We are becoming a knowledge-based society, one 
that depends on the creation and use of information. 
Economists point out that information is becoming 
an important commodity of trade. Many important 
public policy impacts arise from this trend alone. 
Particularly, many privacy problems will grow more 
severe, depending upon the growth of a market for 
personal data 

6. The number of very large integrated data 
systems will increase. 

Although much attention has been paid to the ex- 
plosive growth of small computers due to the 
microelectronics revolution, an equally significant 
trend is the development of systems capable of 
storing and retrieving information in very large data 
bases containing billions or even trillions of elements 
of information. Perhaps one reason this trejjd has 



received less attention is that big data systems are 
not new, especially with respect to the privacy issue, 
The fair information practice concepts were meant to 
apply to such large, centrally controlled data bases to 
which the information has been knowingly con- 
tributed by the data subject 

It does little good to think about general trends 
unless they can be discussed in terms of our environ- 
ment This paper will examine the environments in 
which humans live their lives, beginning with the 
most intimate environment the individual person and 
following with the home, the workplace, and other 
social environments— finance, education, the market- 
place, and the government 

Information Technology and The Person 

The first and most important locus of hew informa- 
tion technology we will examine is the last fortress of 
privacy, the individual. Three important trends are 
changing the nature of information collection at this 
important boundary: 

1. Micro-miniaturization of electronics increases 
the portability of information technology. 

2. Improvement of sensory instruments allows for 
sophisticated, unobtrusive monitoring of bodily 
functions. 

3 New telecommunications technology will 
facilitate direct links with individuals no matter 
where they are. 

Portable Information Tools 

A number of information devices can be designed to 
be carried in a person's pocket for everyday use. Thfey 
will resemble the current pocket calculators that have 
become so popular. The principal differences will be 
that their function will depend at least partly on the 
storage of information, and they will be capable of 
linkage with other systems. t \ 

• The hand-held computer 

The hand-held calculator will be looked at as a very 
short-lived phenomenon, although some version of 
the device will continue to be around for a while to per- 
form very simple calculati6ns. The ftrst hand-held 
computers are already on the market They are fairly 
limited, both in programming language (Basic) and in 
^memory size (a few thousand characters), and they 
cost a few hundred dollars. Their price is expensive for 
a calculator, but cheap for a computer. If the trend 
established by the calculator offers any clue (and it 
should), we can assume that performance will improve 
rapidly, and the price will drop just as quickly. These 
machines will be used for numerous purposes in an in* 
dividual 's daily life— storing telephone and address 
list$, a calendar of appointments,* and financial 
records and inventories of personal property. These 
applications are already popular with owners of home 
computers and would probably be even more so on 
pprtable hardware. 



The popularity will increase as systems are 
developed that require less computer sophistication 
on the part of the user. As the price of hardware con- 
tinues to drop, dedicating a unit to a specific task 
accomplished through a specific language becomes 
more feasible. For example, a checking account 
management system the size of a checkbook might be 
permanently programmed to perform specific tasks, 
which features a keyboard that has commands such 
as "post," and "deposit" A pocket "Day-timer" 
might be similarly marketed, or a pocket address 
book. Particularly promising is a pocket investment 
computer designed to track an individual's portfolio 
ur list of stocks he or she is watching. Periodic plug- 
ging into the Dow Jones service would update the 
data base and a stockholder might even Use it to ini- 
tiate transactions: 

The key to all these devices is that they will store in- 
formation of various kinds and will probably be 
designed to communicate with a larger system at 
times to dump recent transactions or update their 
own small data base. 

• The "Intelligent" or "Smart" Card 

The intelligent card has not yet reached our shores 
from France where most of the developmental effort 
seems to have expanded. Some U.S. corporations are 
reportedly studying it 

Simply put, the intelligent card is a microprocessor 
within a credit card. From a technological point of 
view, the intelligent card is similar to a hand-held com- 
puter. However, from a functional point of view, it is 
designed to be part of a much larger system and to per- 
form very specific functions within that larger system. 
Thus, the card neither has a keyboard nor any mecha- 
nism for the person who carries it to interact with. 

In its simplest incarnation, the intelligent card will 
be a more sophisticated automated banking card. It 
will allow for more elaborate identification and 
authentication processes that will he more difficult to 
forge. It will allow more sophisticated operations for 
point-of-sales transactions. 

Development of the card is a step toward the 
ultimate goal of creating a true "cashless" system. If 
the equivalent of a cash advance could be written into 
the card's memory by the bank, then a merchant 
could accept the card as direct payment without 
needing to communicate on-lirfte to a bank. Advances 
could be made electronically by an automatic teller 
without dispensing cash. The bearer would, in turn, 
have the equivalent of cash in his or her hands 
without the danger of theft or loss. 

Several problems remain to be solved, however, not 
with the technology of the card, but with the overall 
system in which its use would be imbedded. Problems ' 
such as security, protection from forgery and fraud, 
must be studied very carefully, not to mention the 
numerous legal and regulatory problems that would 
have to be resolved. Privacy would, of course, be a 
probable consumer concern, in addition to a general 
uneasiness at not having the green and silver stuff in 
hand or pocket. 
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Even aside from its use as a cash-card however, 
numerous applications have already been poposed 
for this technology. Among them are the following: 

— A gasoline credit and/or rationing card 

— An unfargeable national ID card 

— A device for home terminal stock and bond 
trading. 

— A portable medical record file. 

— A medical insurance identification and record. 

' — A credit or debit card. 

It will probably be a few years before a major ap- 
plication of the intelligent card appears in the United 
States, while some experiments are projected to start 
in France by early 1982. U.S. firms reportedly looking 
at it include a few banks, the American Express Co., 
~&nd Blue Cross/Blue Shield. 

a Medical Sensors 

Medical science is on the verge of acquiring a 
number of new devices based on microprocessors. The 
instruments also make use of new sensor technology 
developed for the military and NASA. These in- 
struments can be implanted in the body and be pro- 
grammed to measure bodily functions and provide 
electrical or drug stimuli. 

There is no reason to believe that the industry cur- 
rently is working on devices that could control the 
brain or even provide simple location or identification 
capabilities. However, such technology will certainly 
% become technologically feasible over the next decade, 
and it is not hard to imagine certain legitimate applica- 
tions that would result in such a capability being 
developed The possibilities for misuse, no matter how 
unlikely, are nearly Orwelligm in their implications. 

There are three reasons why new medical tech- 
nology may have privacy implications: Q 

1. More types of measurements are possible. 

Scientists are now able to monitor with micro- 
probes the biological functions even within the 
nucleus of a single cell This ability coupled with an in- 
creased understanding of biological and neurological 
processes ensures that future instruments will be able 
to collect a great deal of information about the 
^physiological and psychological state of a subject 

2. The presence of instruments may be unknown 
to the individual. 

3. The instruments could be monitored externally. 

Very small transmitters could be added to ,the 
devices to allow the readings to be monitored from a 
rentote location. Such a device, in its simplest form, 
could serve as a locator or identifier. 

4 

Information Technology in the Home 



1. Many common consumer devices will contain 
computer chips. 

2. Many homes will have personal computers. 

3. A variety of new entertainment media will be 
available. 

4. Communications lines into and oat of the home 
will increase in capacity. 

5. Homes will be linked to various outside informa- 
tion services. 

Consumer Devices 

Many appliances already contain microprocessor 
chips; sewing machines, microwave ovens, television 
sets, children's and adults* games, and thermostats 
are but a few of the applications already on the 
market. This trend will continue, limited only by the 
production capacity of the chip makers. 

Today, appliances use computers in fairly simple 
ways to duplicate or slightly improve control func- 
tions or to clarify* a display of the 'appliance's perfor- 
mance. Future versions will make more imaginative 
use of cohiputer technology. .One of the important 
features will be the ability to tailor the appliance to 
the user's needs. Microwave ovens, for example, will 
remember the favorite recipes of the owner and adapt 
a cooking sequence to match. Telephones now 
''remember'' the most frequently called numbers to 
simplify customer dialing. In both of these examples, 
one of the functions of the processor is to remember 
something about the habits of the user and incor- 
porate that knowledge into its performance. / 

Personal Computers 

Estimates of the robustness of the growth of per- 
sonal computers vary. In fact, the sales curve of any 
new product exhibits an "s" shape, tapering off at the 
saturation point Experts differ on the location of the 
point with regard to personal computers. Conser- 
vatives argue that the personal computer, like the 
ham radio, will be the domaiii of the home hobbyist, 
not of the mass consumer. At the same time, sales 
have been higher than predicted, stimulated by, the 
Tandy Corporation's (Radio Shack) entry into the 
market 

In 1977, the^Tandy Corporation, a firm that 
specializes in consumer electronics* marketed a home 
computer, the TRS phenomenon that future 
social scientists may lo5x upon as a watershed. For a 
few years fcefbre 1977, the personal computer market 
was characterized by very small manufacturing firms, 
unreliable distribution, small stores, and little service 
support Then Tandy went far the mass computer 
market and paved the way far other firms such as 
Apple. Now computers'are being purchased by small 
business owners, professionals, school teachers* and 
other people who use the computer as a tod. In these 
homes, computers help with budgets, store infor- 
mation of all sorts, jxmtrol household appliances, and 
educate children (or parents). In the/next decade, this 
trend could well keep the sales curve climbing 
sharply. 




This section will examine the five specific 
characteristics of new information technology in the 
home: 

ERIC * 
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The practical Uses of computers that motivate the 
market are also significant from a privacy point of 
view The most popular applications appearing on the 
market now involve automating checking accouhts, 
tax preparation, inventories of personal property, 
telephone and address lists, and time scheduling— all 
applications that involve computerization of personal 
data Furthermore, the personal home computer is a 
vital link to other information services originating 
outside the home and delivered over various types of 
communication channels. 

« 

Entertainment Media 

- If market estimates are- correct in their predictions 
of widespread use of new tfideo entertainment serv- 
ices supposedly on the way, this society will soon 
perish, tor we will have no time left in the day for 
sleep, nourishment, work, or any other normal social 
function. A list of some new video technologies here or 
on the way follows: 

• Video cassette recorders 

The first of the new video technologies is nearly ten 
years old, but has grown into a major consumer prod- 
uct, at least among the affluent markets. Its principal 
lures appear to be "time displacement, M that is, the 
ability to* watch programs at a time of one s own 
choosing and X-rated films. 

• Intelligent video discs 

The technology used for some of the vid^Tdisc 
devices allows a microcomputer to be connected to the 
unit Computer data and programs can be stored on 
the disc, ai^wett^s text, stereo sound, and high resoltu 
tion still pictures. A video disc so equipped becomes eP 
device markedly different from the "record player 
with pictures" originally conceived by the industry. 
The data storage potential of the disc is illustrated in 
an estimate by Xerox that, within five years, only 100 
video discs*could contain the entire holdings of the 
library of Congress. 

• Low power broadcasting 

Low power, broadcasting is a new television 
capability just opened by the FCC for licensing. It 
merely allows television stations to broadcast pro- 
grams on standard television channels at a power 
level low enough not to cause interference beyond a 
range of only a few miles. The advantages are two- 
fold: it allows many more channels to be opened for 
use in an area, and the broadcast facilities are rela- 
tively cheap— only a 1 few tens of thousands of dollars 
can get a channel on the air. These two advantages 
will, in theory, open up the airways to more groups 
with specialized interests and markets. 

• Cable and two-way cable 

Like video cassette, the cable has been around for 
some time, but the boom has only now started. Cable 
use has grown from a mere five million homes in 1970 
to 30 million homes in 1980 to a projected 46 million 
homes in 1985. The attraction of cable is no longer 




better signal quality for the normal broadcast chan- 
nels, but a rich variety of offerings from normal 
broadcast to specialized cable services 
nationwide ovef^ satellites. Most new ins^ 
also installing two-way capacity despite 
retreat of the FCC from regulating the indi 

• Direct broadcast satellite # 
COMSAT has proposed to the FCC establishing a 
direct broadcast satellite service that would provide * 
three channels of programming across the country. 
The programs would be broadcast directly from a set 
of communication satellites to receivers' homes. The 
technology remains somewhat expensive, but the cost 
is dropping rapidly. As with many other video tech- 
nologies, the final price levels for the hardware will de- 
pend upon the size of the consumer market that 
develops. Over the next decade, a number of such 
direct broadcast serv ices could evolve, although the 
price of building a satellite system and limitations on, 
frequency and satellite parking orbits would serve to 
keep the number low. 

It is pure guesswork at this time to predict which of 
these technologies will win the competition for the at- 
tention of the consumer. Nor is it possible to see with 
confidence what their long-term uses- will be or the 
changes in social behavior patterns they will*create. 
Surely, in many ways they are new media, as different 
from network broadcast television as that technology 
is from the radio. However, the following trends 
already seem likely and may be relevant to privacy 
problems: 

— The substitution of electron storage for print 

While printed paper will not disappear for a long 
time as a means of communication, current trends 
suggest that there will be a steady replacement of 
print bf electronic communication. Publishers and 
newspapers are buying communication companies as 
fast as they can. At least onfe magazine is published 
on videotape, and experiments are underway with an 
electronic newspaper 

— Pay-for-service 

The days when most video entertainment was pro- 
vided 4 ' free" by network broadcasters are probably* 
drawing to a close. Tho new technology, as well as the 
changing economics in the information marketplace, 
will promote a move toward the consumer paying for 
each of the programs used. This trend will, of course, 
raise questions of "access," but they will also result in 
detailed records of viewing habits retained for billing 

i purposes; these records are possibly equal in sensi- 

Xtivity to library records. 
T — "Narrowcasting" 

Also on the wane will be the orientation toward 
mass entertainment. The new video technology will 
lead to what is referred to in the industry as "nar- 
rowcasting," that is, aiming particular productions at 
specific audiences and specializing in particular types 
of programs. This trend, analogous to that already ex- 
perienced by the magazine industry, is starting to 
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appear in cable. Special cable networks exist for ex*, 
elusive coverage in areas such as sports, news, and 
religion. This trend is facilitated by the increased 
number of channels available and by satellite trans- 
mission to many cable outlets which allowa even a 
specialized market to aggregate over a large 
population. 

* 

Communication Channels 
* New communication technologies are changing the 
amount of information that can flow to and from and 
within the home. The principal limit on the speed with 
which these changes take place will be the rate at 
which facilities can be built, far the entire copper wire- 
based communications network of this country is be- 
ing transformed. The home will see the following 
changes: 

• Fiber optic telephone* lines 

Fiber optic transmission consists of pulses of light 
sent through thin glass fibers. The capacity of fiber 
optic transmission lined is much greater than that of 
copper wire or cables of comparable -size. The steady 
improvement of the technology, coupled with the in- 
creased cost and scarcity of copper, indicates that 
fiber transmission lines will steadily replace copper 
ones. Replacement, however, will be slow because of 
large amounts of capital tied up in the -existing 
system. AT&T's annual capital budget is an enor- 
mous $14 billion, but the total vajue of the current 
yvstem is an even more 1 awe-inspiring $111 billion 
book value. (Both figures are 1978 dollars.) Telephone 
companies will probably begin this effort in the 
intermediate-length trunk lines connecting cities and 
within large cities such as Chicago and New York. 
New developments, towns, and very large buildings 
are receiving fiber transmission lines early. Replace- 
ment of lines in older neighborhoods will probably 
take much more time. 

This conservative estimate could be changed by 
regulatory and tax changes directed toward en- 
couraging faster installation or-by increased competi- 
tion from other new <?hgnneis df communication for 
the home such as cable or broadcast 

• Cable 

After a period of dormancp following grand predic- 
tions of growth in the late 1960s and early 1970s, 
cabl? is now growing rapidly. Cities are granting fran-, 
chisdfl, and large corporations that have the necessary 
large amounts of available investment capital have 
now entered the business. 

By, the end of the decade, a significant number of 
homes will be tied to the end of a table and most of 
those links will be "two-way;** that is, they will allow 
the home to transmit information as welTas to receive 
it However, because of the demands of a television 
signal, the transmission capacity into the home will 
be significantly greater. 

• Direct satellite broadcast 

Depending on the success of experiments such as 
the COMSAT proposal mentioned in the previous sec\ 
tion, many homes may have small antennae on their * 



roofs for the direct reception of satellite transmis- 
sions. A two-way satellite system is a more remote 
possibility, but expensive, and although techno- 
logically feasible, such a facility would not merit 
implementation. 

In-home Information Services 

The new 4 home communication lines mentioned ' 
above are intended to carrjroervices to generate thfe 
income to pay back the large investments made in 
them. In many cases, entertainment services wilt be 
the principal offerings, but, once the lines are Ih place, 
mahy other services become economical. In fact, in 
some cases, non-entertainment services that were 
once regarded as supplementary are now being 
viewed as major sales attractions. 

Among the wide variety of possible services on the 
drawing board or offered experimijptally are the 
following:. : 

•^Teletext/Viewdata 

A number of technologies exist to bring informa- 
tion services directly into the home through the televi- 
sion set Both broadcast and cable services are being 
designed. 

The teletext services are the oldest. technology and 
have been widely developed in Europe and Japan. The 
format is essentially passive, like a magazine. All in- 
formation in the magazine is broadcast over and over, 
and the viewer has an electronic switch with which he 
or she chooses pages. Two-way viewdata systems 
allciv the user to request specific information from a 
veiw large data base. The information is then 
transmitted to that specific person's receiver foe 
display. ( 

The specific formats for these systems are now a 
matter of great debate among U.S. firms. The key 
point for the future decade, however, is that the in- 
dividual ViB have nearly instant access to a wide 
variety of timely and valuable information. 

• Home banking 

Ibday many banks and savings institutions already 
offer a pay-by-phone service to their customers. How- 
ever, more elaborate services are immineqf . Owners of 
personal computers already* have available a more 
sophisticated service being offered experimentally by 
a few banks. Such services in the future will link a 
home computer system with a person's bank record as 
to allow access to budgeting, tax accounting, pay/ 
ment authorization, loans; virtually the entire range 
of services banks now offer their larger corporate 
customers. 

Subscribers to cable-based yideotext systems will 
also have access to sophisticated banking services. 
An experiment along these lines has already been 
mounted by Baiw One in Columbus, Ohio. 

The principal technological limitation to home 
banking services will be the inability to handle cash 
transactions for deposit and for withdrawal. Perhaps 
the greatest pressure for replacement of cash by the 
"intelligent card" (see p. 17) will be that such a card 
will allow complete in-home banking including the 



direct withdrawal of money in electronic form* Such a 
service, should it come to pass, will appear only 
toward the end of the decade, for several technological 
and regulatory problems remain to be solved: 0 

• Home security 

Cable systems with two-way capability are offering 
burglar and fire alarm and medical alert services to 
their customers and have found the market to be quite 
strong. Over the decade sych. services will likely 
become commonplace additions to the in-home cable, 
and! they may become increasingly sophisticated. The 
implication, however, is that substantial monitoring 
of the household environment is taking place from the 
outside and the results stored in data bases. Since it 
#iU be done in the namfe of security, the privacy im- 
plications of such data collection may be igpored by 
the customer. . * 

The security concept could be extend^ to include 
other services that monitor the home environment, 
for example, utility meter readings done by cable. 
Such facilities, however, could be used* to accomplish 
other types of surveillance that may not be voluntary 
on the part of the occupant As a single example, sup- 
pose another wave of energy conservation regulation 
sweeps the government. Using information tech- 
nology, government agencies could easily monitor 
homes to ensure compliance. 

• In-home shopping 

A service known as Com-U-Star, which now^axists 
on personal computer networks, provides a nation- 
wide shopping service to participants. Two-way cpble 
companies are beginning to develop such services, 
although they are experimental at this time. It seems 
probable that a significant amount of purchasing will 
take place from the home over cable, telephone, or per- 
sonal computer data network. The rate at which it 
grows will depend on the degree to which the savings 
in time and cost to the consumer will outstrip his or • 
her desire to look the salesperson in the eye and 
squeeze the merchandise. 

• Electronic mail 

Some primitive electronic mail services already 
exist for users of personal computers. Eventually, the 
transmission of text material from point-to-point elec- 
tronically will be commonplace. 

Some experts, including tKe U.S. Postal S^iVicer 
claim that this transmission will be achieved by 
means of intermediate processors that convert the 
text to electronic form in some central office and 
transmit the textr^hich is then converted back again 
to paper in the home. 

Indeed, were electronic mail to evolve from the 
traditional services, such a development might occur- 
However, electronic mail may also develop as an 
added service of cable or personal computer data net- 
works, sophisticated services that already exist A 
mail network will grow because of increasing numbers 
of people tied into existing networks, not necessarily 
because of technical advances. 



Furthermore, many of the tasks we now perform by 
mail will have electronic substitutions. As . stated 
above, the next decade will see the growth of the elec- 
tronic magazine and newspaper, advertising and in- 

t home purchasing over cable, and home banking. As a 
test, lodk at the next batch of mail that comes to your 
home andtry to imagine how much of it could be re- 

t placed -by home information services, whether called 
"electronic mail" or npt. 

• The digital telephone . * 

For mostly technical reasons, the telephone com- 
pany has been gradually converting its network to 
digital transmission. One result of this conversion is 
that the signal conveying the voice will be in a 
computer-readable and storeable form. Signal infor- 
mation about the source and destination of the call is 
also digital. 

These changes allow the telephone companies to 
computerize their network switching operations/ and 
they also allow a number of new services, including, 
the following: 

— Forwarding of calls to another number 

— Display of the calling number on the telephone 
of the receiver 

° — Storing a voice nfessage in the system for later 
transmission 

Although the "potential for > future information 
technology and services in the home may seem 
somewhat overwhelming, some general statements 
can be made about the privacy implications of all 
these systems: * 

1. George Orwell's corn^pt of massive television 
surveillance "in the home is not likely to be 
technologically feasible for some time, due to 
limited communication capacity from the home 
and the difficulty of processing such a mass of sur- 
veillance information. 

2. The available technology would support, at 
some expense, the ability to keep close w$£ch over 
specific residences. 

3. Substantially more personal information would 
be available in electronic form for surreptitious 
bugging than can currently be gained from a wire- 
tap or eaves-dropping device. 



• Information Technology in the Workplace 

In this section, we will describe those technological 
trends that Will affect the workplace and that may 
have privacy implications. If the discussion seems to 
dwell on the service and information sectors of the 
economy, white-collar work, there are good reasons. 

First, the number of people engaged in the manufac- 
turing and agricultural sectors of our economy is 
small and still shrinking. Second, the service sector, 
because it has felt the heaviest pressure to improve 
productivity, is automating rapidly. Office automa- 
tion has become the fad of the early eighties. 



Whether white or blue collar, automation of the, 
workplace will have some general effects on the people 
who are aslcgl to operate them: 

1. Any automated machine is potentially capable 
of collecting and storing information about the 
performance of the person operating it 

2. Automation wi|l change job definitions and pat* 
terns of work. These changes will also be reflected 
in changing patterns of authority. 

3. Whenever a job is capitalized by the addition of 
expensive machinery, the attention of manage- 
ment shifts to the productivity of the machines 
rather than the people operating them. This shift in 
concern can lead to a greater desire by manage- 
ment to measure and monitor employee perform- 
ance. The performance of a secretary with a 
typewriter is measured as a combination of many 
skills. The installation of expensive word pro- 
cessors, however, can drive management into an 
obsession with keeping the machinery going at the 
fastest rate possible. < 

Factory Automation 

Spurred by advances in computer technology 
specifically robotics and computer aid^d design, along 
with increased competition from the Europeans and 
Japanese, manufacturers 'will undoubtedly move*very 
quickly to automate over the coming decade. The 
principal changes will be the movement of automation 
/into manufacturing assembly, putting small devices 
like pumps, electric motors, or computers together. 
The automated factory of the future will integrate its 
functions. That is, the automation will not consist of 
merely bringing in another machine, but of reorgan- 
izing the entire, work of the factory around computer 
control. 

As' Stated above, these changes will affect workers, 
and unions are starting to warn their locals to watch 
for the use of such computerized equipment for 
surveillance or other types of coercive activity. 
However, the two most significant problems that 
worry unions are (a) protecting jobs and (b) accom- 
modating the changes in skills that will be required of 
the workers. y 

Of fice Technology \ 

A number of basic changes are taking place in the 
office. Among them are the following: 
• Disappearance of paper 

The costs of electronic information processing are 
dropping, and tfee costs of material and labor for 
handling physical forms of information are climbing. 
Some analysts say that the electronic form is now 
cheaper than paper. 

In a typical word processing system, 1000 
characters can be stored for only a penny or two, and 
storage prices continue to drop rapidly as the 
technology improves and as mass production 
economies are realized Many cost projections dwell 



on the effects of technological advances. However, the 
effect of the rapidly growing market for computer 
supplies is also marked; this increased demand results 
in more efficient production and distribution and, con- 
sequently, lower prices. 

While politicians soberly discuss the possibility of 
electronic mail, corporations are already using it. New 
data communication services are being developed by* 
old and new companies to serve this new application. 

Satellite Business Systems, a new company, has 
just connected its first customers. AT&T and Xerox 
will soon follow. Their facilities are designed to pro- 
vide high capacity data communication services that 
will support intercomputer networking, electronic 
mail, fascimile transmission, and conferencing. Over 
the next decade businesses will link together through 
these data channels and most information exchanged 
will be transmitted electronically. 

The teleconferencing technology has been awaiting 
a drop in data communication costs and for facilities 
to become more accessible. Whether through audio, 
• video, or computer conferencing, organizations will 
probably turn to these media as a substitute for travel 
and as a means of building tighter and more timely 
administrative links between offices. While the 
literature has focused on teleconferencing between 
distant locations, the technology piay well turn out to 
be «m economic facility for use jwithin a single 
building. ^ 

• Automation of clerical functions 

Closely linked to the trend above is the automation 
of information handling. Probably the most visible 
current trend is the advent of the automated office, 
word processing being the leading development. 

Word processing represents the substitution of 
electronic computer-based devices for the typewriter, 
and we all know the benefits that have been at- 
tributed to it. Over the next decade, word processors 
will be integrated into the larger information flow of 
the organization. They will be tied to the electronic 
mail system and an electronic filing and information 
retrieval system. Managerial and professional staff 
will have terminals on their desks. T^he manager can 
enter a draft into the system; then sophisticated inter- 
faces could put the draft into correct format <e.g., . 
memo or letter) and correct spelling and grammar. 
Voice input has been projected for the mid-to-late 
1980s although several problems remain to be solved. 

The technology clearly has the potential to change 
the nature of the secretarial job, possibly evep 
eliminate it However, another trend is also becoming 
clear, at least in the early stages of office automation, 
a trend that may well run counter to the expected 
disappearance of the secretary. Because a word pro- 
cessor is more complicated to Use than a typewriter, 
this technology may well professionalize the job of 
secretary.. 

It is usually assumed that automation is applied to 
a job as previously defined. In this view, an 
automated typewriter should take less skill to use 
than a manual' one. Why is the^ppposite true? 
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Because, the new technology provides more flexibility 
by allowing the user to do more work and to mani- 
pulate many more possible functions. Like a librarian, 
«the secretary will manage the , flow of information 
into, out of, and within the office, using all the infor- 
mation technology discussed above. 

Many other service jobs are being affected 'by 
automation. For example, cash registers have by-and- 
large been replaced by computerized systems. Bank 
tellers work with terminal or telephone access to a 
computer data bank containing account information. 
The same holds for airline ticket agents, car rental 
agents, hotel clerks, and so on. Grocery stores are cur- 
rently installing automated checkout systems. 

A common characteristic of all these devices is that, 
in addition to providing the information services 
necessary to do a job, they also collect information on 
the employee. Even if that information is not used at 
present, it is available, and employers are starting to 
collect it. Word processor operators in large shops 
may find that elaborate statistics are being main- 
tained on their performance, typing speed, time at the 
terminal, error rates, and so on. Measurements of the 
activity of store clerks, bank tellers, and others can 
help employers check for fraud or employee theft. 

• Changing patterns of information flow^-~ 

. Bacause of the changes ^discussed above, the pat- 
tern of information flow within an organization will 
likely change, thereby affecting the way decisions are 
made and authority exercised. The process by which 
new ideas are born, discussed, tested, and modified 
within an organization before they are presented to 
upper management occurs in an environment with 
some limited form of privacy. If the effect of automa- 
tion is to increase the transparency of information 
flow within the organization, creativity could be 
stunted, or alternate informal channels could develop. 
Therefore, for their own self-interest, organizations 
may need to concern themselves with the "privacy" 
of internal employee communication. 

The computerization of information within an 
organization will also expose it to more attempts, 
legal and illegal, to gain access to that data from the 
- outside. A well-organized corporate information 
system, which stores all memos, correspondence, 
reports, and forms electronically and indexes them for 
retrieval by management, would certainly be a useful 
target for "fishing" by regulatory agencies, adver- 
saries in lawsuits, or competitors. 

• Automated security systems 

Employers have legitimate concern about the 
honesty of their employees. In some businesses, 
employee theft and fraud are a major expense. The 
productivity of their employees is also of legitimate 
concern. Information technology offers new oppor- 
tunities for imposing tighter controls. 

Companies now offer microcomputer-based locks 
that are activated by a machine-readable employee 
cird. These locks can be used to control physical ac- 
cess to locations or to devices such as gas pumps or 
O mputer terminals. They can also be used to control 



the access or just to monitor it, for "access informa- 
tion—since they are computer-based— can be stored, 
or transmitted to some central location to keep close 
tabs on the movements and activities of employees. 
Later in the decade more sophisticated surveillance 
technology may develop, particularly automatic pic- 
ture or voice recognition. 
The capability to use other information technology 

;in an automated office for such surveillance will also 
develop. Already, companies are using pen registers 
in digiUj telephone systems to monitor employee use^ 
of the telephone. 

Finally, the next decade may see substantial refine- 
ment in the technology of computer-based devices for 
' lie-detecting or other psychological measurements. 
" The voice stress analyzer now on the market is 
reportedly used by some companies. Many other com- 
panies still use conventional lie detectors, which are 
troublesome enough, but at least require some 
cooperation and knowledge of the employee. 

• Automation of professional services • 

Professionals such as lawyers and doctors also,deal 
with information. In the coming decades, information 
systems will support their work in a nupnber of ways: 

are already on the market, such as Lexis, 
Medline, and so on. Pergammon is developing a 
patent search library for a video disc/computer 
system. 

— Office management systems. These systems 
may be based on small office computers or they 
may be linked through terminals to a central 
service bureau. They may maintain client * 
records as well as financial information. 

— Assistance with work. Researchers have been, 
working on diagnostic aids to doctors and some 
are soon to be commercially available. Lawyers 
have for some time been using computers to , 
store and index evidence. Over the next decade, 
systems using artificial intelligence techniques 
may even play the role of a research assistant As 
the size of complexity of the data bases in- 
creases, the professional will need sophisticated 
aids to help him or her make use of the informa- 
tion. 

— Educational services. Many professionals find it 
difficult to stay current with rapidly changing 
fields. It seems likely that technology based pro- 
fessional refreshment packages will be marketed 
in the near future. 

Of course, the applications that have privacy im- 
plications will be those involving the maintenance of 
client records. These will be uses such as billing, 
medical treatment, or manipulation of legal evidence. 

• Geographical dispersion of work centers 

Some experts predict .that work will be dispersed 
geographically. Some press attention has been given 
to the electronic office and thgjdea that office automa- 
tion combined with high-speed data communication 
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make it unnecessary to locate all employees in a con- 
centrated center. Regional offices or even work in the 
home will be feasible. 

Decentralization is also planned for manufacturing. 
The Norwegians reportedly are considering using 
robotics technology to develop a system of small 
geographically dispersed manufacturing centers. 
They feel that automatidfrwill eliminate economies of 
scale in manufacturing that favored large factory 
complexes. 

All these trends are technologically feasible. 
Whether they are implemented on a large-scale basis 
in' this country will depend on many social and 
psychological factors that are not so easy to predict. 
A trend such as concern about energy or national 
' security could motivate a boom or a decline. 

Information Technology and Society 

* Individuals encounter information technology in a 
number of social environments. This section will 
,. discuss four of them— finance, education, the market- 
place, and government. 

Finance 

Electronic Fund Transfer (EFT) has been in the 
news for some time. There is no commpn definition of 
what EFT consists of. \t is not a single, unified ap- 
plication, but a number of advanced computer-based 
services found in banks across the country. The most 
familiar examples include the following: 

• Automatic teller machines u 

These machines are already ubiquitous in most 
cities. They are the storefront machines that allow 

cash withdrawal and deposit 24 hours a day. 

** 

• Pav-bv-phone services 

* • V ... 
Some Jbanks allow their customers to initiate 

payments by a telephone call. The process is not com- 
pletely computerized' at this time, since a human 
operator intervenes In most systems. 

• Point-of-sale systems 

J This type of system is essential in the future 
"cashless society/' A consumer will be able to pay for 
goods at a store by directly initiating immediate 
payments from the customer's account to that of the 
store. \ » 

• Automated clearing/ 

Clearing is the process of transferring funds from 
one bank account to another in correspondence to 
checks that have been drafted. Automated clearing, 
simply the use of computers for the transaction, is in- 
visible to the consumer, but it may have significant 
privacy implications because of the collection and 
storage of personal data and the possible role of the 
Federal Government in operating a regional or na- 
tional clearinghouse. 

To the list above, the in-home banking services 
mentioned previously should be added. But the 
O trends in computerized financial services are too com- 
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plex to be encapsulated in a list. The structure of the 
industry is changing. Marked changes include na- 
tional banking, the merging of savings and checking 
accounts, the provision of traditional banking 
services by institutions such as insurance firms, stock 
brokerage houses, arid credit card firms. 

In such turmoil, only a prophet would dare to try to 
predict the future. However, it is possible to describe 
v certain privacy-related characteristics of this new 
world of finance: 

— Much more personal information will be col- 
lected and stored in computerized form. 

— The integration of financial services, banking, 
investment, insurance, and credit will cause the' ' 
integration of individual financial information. 

— Nationwide financial networks will be created 
by national interstate banking, a national clear- 
inghouse, or alternate providers of financial 

services. 

— It will handle personal financial information 
gathered by organizations not having tradi- 
tional standards of responsibility for protecting 
privacy as the banking industry does. 

— For those who do not wish to participate in a 
"cashless society," a major isSue may be 

. whether alternate payment mechanisms will be 
available. The economics of payments tech- 
nology may not support two or more parallel 
mechanisms. 

Education 

Education is basically an information activity. It 
transfers information, and it teaches individuals to 
,use information. It is only natural to expect that infor- 
mation technology would have a significant effect on 
education. However, past predictions that it would 
revolutionize education have not come to pass. There 
are two reasons why the past may not be a guide to 
the future. First, the cost tradeoff curve between 
technology and teacher salaries continues to move in 
favor of technology. Second, people traditionally 
equate education with* the schools. Historians of 
education will point out that such an equivalence is * 
wrong, that the public school is a fairly recent inven- 
tion in social history designed to achieve specific 
goals. It would not be a very major cKange for the 
principal locus of education to shift away frojn the 
public schoolroom, and, indeed, there is persuasive 
evidence that such a shift may be occurring. Informa- 
tion technology may be more effective in a different 
environment. 

There are a number of functions that information 
technology could perform in education: 
L It will serve as a teacher. 

Computers will present teaching materials to 
students interactively; Linjked with video technology 
such as video discs, cassettes, or even broadcasting, 
computers can present instruction through interac- 
tive dialogue or simulation. 

1 0*J 



2. It will facilitate distribution. 

Communications technolbgy frees the restrictions 
of place and time that education now experiences. The 
home, the office or factory, the church or community 
center all become feasible locations in which to study. 
Even seminars or other forms of classes that require 
class "discussion can be conducted over a nationwide 
network. The integration of computers and com- 
munications will magnify the privacy problems in the 
1980s and thereafter. 

3. It will provide sophisticated toting and 
diagnosis. 

Computers have already revolutionized testing for 
ability and achievement. The computer that is ac- 
tively involved with teaching has*ven more data with 
which to draw inferences about a student's learning 
style, abilities, and the degree of mastery of the sub- 
ject at hand. This data will* be useful to guide the 
education process and will likely be maintained as 
part of the student's records. Also included under this 
label should be the continued growth of large Testing 
organizations such as the Educational "Testing Ser- 
vice. Despite the recent controversy over testing, 
such organizations cannot help but continue to grow 
as gatekeepers into the regular education system. 
Indeed, new pressures are on them to become more 
active in the area of professional certification and re- 
certificaton. The services they provide are certainly 
dependent on the. availability of inexpensive, large- 
scale computing and data storage. 

Even if education is not fundamentally trans- 
formed by technology, instructional applications will 
become far more important Instructional programs 
'are already being offered for personal computers, 
video discs, and on two-way cable systems; and public 
broadcasting has. undertaken a major effort 4 to 
develop a "university of the air/* Industrial educa- 
tion, already a major user of information technology, 
spends an estimated $50 to $100 billion annually. 
Commercial schools, such as the Control Data In- 
stitute, are springing up; they also offer alternatives 
to public education. 

Information technology will a^ow for more genera- 
tion and storage of personal information generally 
' considered sensitive, especially data on academic per- 
formance and psychological profiles. This information 
may be kept by any number of organizations other 
than schools. 

The Marketplace 

Much of the technology that will be used in the 
retail, marketplace has been discussed in the sections 
on the home and finances. It is necessary to point out, 
however, that all of these systems link together, and 
the link is the personal data collected in the systems. 
The following quote from the LINK News Briefs of 
April 1 illustrates this concept: 

(A corporation) will monitor the influence of com- 
mercials on cable viewer's buying habits for a 



firm whose clients consists of major advertisers 
and agencies. The test will take place on several 
cable systems, with selected Subscribers viewing _ 
specific commercials sent down from the headend. 
Data on these viewers' subsequent purchases will 
then 5e recorded at their local supermarkets via op- 
tical scanning of the Universal Product Code found 
on shelf items. (Cablevision, March 16, p. 9) . 

The firm in question probably has obtained the per- 
mission of the subjects, but that point is irrelevant to 
this technology profile. The significant points are the 
following: 

1 . Such a study can be done even with the cur- 
rently limited state .of technological implemen- 
tation. 

2. There is an ecohomil motivation foe. firms to 
collect the information. 

3. The information can be collected through these 
systems without the conscious cooperation of the 
data subject; and the subject has no interest in the 
data collection. 

The Government \ 

The government, of course, will also have a large 
menu of information technology available. There are 
five significant trends that will affect the privacy 
problems of federal data systems over the next 
decade: 

1. Big, integrated data bases will be possible. 

There is renewed interest within the Executive 
branch in a central data base to combine information 
on all recipients of social services. Such systems will , 
become increasingly feasible arid economical. 

2. Distributed information systems will become 
common. 

It is not necessary to combine all data into a single 
computer to use it. High-speed data communica-, 
tions, combined with advanced software technology, 
make it possible to build systems with pieces of the 
data scattered around the country. The systems may 
be operated by a single agency, as are regional Centers 
run by IRS, or they may be interconnected data bases 
of many agencies, federal and non-federal. 

3. The technology now or soon to exist will sup- 
port a nearly unforgeable national identification 
card combined with instant on-line access to an ac- 
companying data base. 

4. The increase in computerized data in all parts of 
society will increase the opportunity, if not the 
temptation, for further data collection on the part 
of government. 

i 5. Powerful polling and direct mail solicitation 
technology may have profound effects on the 
nature of politics both at the federal and local level. 
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A Taxonomy for Privacy 

by Willis H. Ware* 

v * 

> The invitation to present this paper suggested that 
it might seek to organize privacy concerns in some 
overall framework. How can the many cjimensions of 
privacy be all put together? How can the various per- 
spectives on privacy be harmonized? Can a focus be 
provided to give some guidance to the legal and judi- 
cial systems of the country? Behind these questions is 
the observation that the legal, judicial, and legislative 
communities— as influenced by moral and ethical 
views— are dealing with privacy issues one by one as 
they arise. So to speak, the issues are dealt with dis- 
jointly and in the small rather than in the large. There 
seems to be no cohesion presently across the fabric of 
privacy. ~ v 

A suitablefragjfiaj^rk must not only accommodate 
the foilrtUQ'ftiluth of technology, but it also must em- 
brace such privacy law as has already been created; 
and it must provide a mechanism for the moral and 
ethical views of society to play their part One might 
try to approach the task by imagining the privacy 
consequences for each application of new technol- 
ogies. However, one cannot be sure that a comprehen- 
sive catalog would ensue; and anyway it would all be x 
speculation about things that are possible in principle 
but might never happen. It is altogether too easy to 
construct scenarios based on technological possi- 
bilities, but altogether too difficult to predict whether 
such events will ever occur. The discussion here will 
attempt a pr&gmatic look at the broad sweep of 
privacy and is oriented toward providing the legal and 
judicial communities a way to look at privacy litiga- 
tion, and possibly also a way for the legislative com- 
munity to think about new law. 

It has been suggested that the proper issue to focus 
on i§ the mere 4 existence of technology rather than its 
use. However, even though the purveyors of contem- 
porary technology might contend themselves with 
marketing just products rather than services, privacy 
consequences will inevitably arise as the uses of such 
products spread. Existence of technology will un- 
avoidably breed some uses that are undesirable in 
some way. Furthermore, the world, its population, 
and its institutions must collectively struggle to 
become more efficient, to conserve resources, to exist 
and grow, and to establish more equitable societies. 
Thus, although such products as hand calculators, 
personal computers, various cable services, wired 
cities, and on-line data bases can— in some scenarios 
—create privacy consequences in principle they do * 
not automatically give rise to privacy difficulties in 
fact and may never, depending cm details of the 
utilization. In taany circumstances economic aspects 
will be the principal driver; although in some, in- 
novative applications by imaginative people can also 
stimulate problems. 
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Any discussion of technology will always point out 
its rapid progress and the profound effect it is likely to 
have on society, especially when the technology in 
point is related in some way. to information or data. 
Without question such advances will have a profound 
effect; the only thing one can argue about is the time 
scale over which it will occur., Will it be 25, 10, or only 
5 years before things now readily possible in principle 
will become real? Why though is the certainty of the 
effect so evident? 

First, information— which is a more comprehensive 
term than data— is the essence of purposeful behavior 
for every element of society. Information is an essen- 
tial ingredient behind the behavior of organizations, 
in the functioning of physical mechanisms, and indeed 
in the basic biological structure of individuals ' and 
other life forms. Along with energy, information is the 
basis for the physical universe as we know it,< for 
everything we appreciate about it, and for the behav- 
ior of society and its institutions. 

Second, modern communication technology is the 
transportation mechanism that moves information 
from place to place and allows us to deliver it 
wherever wanted. In addition, modern digital com- 
puter technology allows 4 us to manipulate information 
in very general ways, and it is important to note that 
digital computer technology is' the only thing that 
mankind has which can process information faster 
than the human head. Together the two technologies 
allow us to do pretty much anything we wish with in- 
formation; and to the extent that we do not yet know 
how to do some things, it is a matter of not yet in- 
tellectually understanding 'enough about the infor- 
mation processes in them. There is no basic lack of 
technology in the way for the most part 

Thus, the blend of communication and computer 
technology— what they jointly make possible— plus 
the universality of information as an element of 
nature, explains why technology is so central as an 
issue of concern to society at large, especially for 
-privacy consequences, and why the impact of the two 
is so certain. Furthermore, the same facts explain why 
the world has made an irrevocable commitment to 
computer and communications technology. The days 
in which affairs could be conducted by paper and pen- 
cil under green eyeshades are forever gone; there is no 
way for the world to retreat from its commitment 
Therefore, we as a society must deal with the conse- 
quences, one of which is privacy in one of its forms. 

As the dialogue about informational privacy devel- 
oped, one sometimes heard the view expressed that "I 
have nothing to hide; anyone is welcome to know any- 
thing about me/' The opposite view is that "No one 
has an intrinsic right to know anything about me ex- 
cept for reason/ 9 It is to be observed that society 
generally does not publish vast encyclopedias con- 
cerning all there is to know about everyone; one must 
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therefore conclude that the let it all hang out" phil- 
osophy does not really prevail. On the contrary, soci- 
ety generally controls access to information by many 
means, although it sometimes grants blanket access 
to some subset of society; for example, all physicians 
can access medical records, or the IRS as an organiza- 
tion has all tax information although within IRS ac- 
cess is controlled by job position. One must conclude 
- that a basic axiom of informational or recordkeeping 
privacy is: 4 4 You may not know something about me 
without a justified (to me), or socially accepted or 
legally sanctioned need-trt-know. ' 
: Looked at that way r one could in principle reduce all 
of recordkeeping privacy Co defining need-to-know for 
a category of information, plus establishing the 
authority under which the need-to-know functions. 
Such an approach is at best a way to deal with privacy 
when we recognize its presence, but it is not a very 
broad-gauge one. The "privacy pie" includes not only 
fair information policy, which is the Way contempor- 
ary law approaches recordkeeping'pri v acy , but it also 
includes aspects of social discrimination, aspects of 
national vulnerability, plus a broad collection of per- 
sonal dimensions including physical proximity, sur- 
veillance of motion, risk of property^and others. 

Philosophically, awkward moral and ethical issues 
arise when one seeks to define privacy, in part because 
the very word "privacy" connotes such diverge things 
to individuals. From a social point of view one might 
try to frame a broad construct for privacy in terms of 
equity by using the notions of equality of opportunity 
for individuals or arbitrary imposition of disadvan- 
tage on individuals. It would seem, however, that 
some very special connotation for ' 'opportuniCfr^or 
4 'disadvantage" would be necessary to develop sucn3T 
theme, and consequently it seems an unsatisfactory 
direction. While it is desirable in the ultimate to have 
a good definition of privacy to keep its philosophical 
basis tidy, a more pressing concern is how to identify 
and define actionable aspects of privacy for the guid- 
ance of legislative anil judicial affairs. 

We— used as a collective pronoun— do not really 
know what privacy is in a comprehensive way, but 
any individual certainly believes that he knows it 
when he sees it What is needed is a framework for 
recognizing a privacy infraction and deciding what to 
do about it when it occurs. So let us consider ap- 
proaching the matter in reverse. Rather than trying 
to define "privacy," define instead "invasion of 
privacy*' and develop an overall construct from that 
i point of view. 

I Consider the notion of "space"— not in the context 
/ of extraterrestrial void, but rather in the context of 
/ personal surroundings. Intuitively, one knows what is 
* meant by the term because it has been used fre- 
quently in contemporary psychological discussions. 
To illustrate, one's visual space is what is accessible 
to *his eyes; one's aural space, what his ears catch. 
One's physical space is a cocoon of certain dimensions 
around a person; and psychological space, while more 
i abstract and harder to define, has something to do 
I q with behavorial or perceptual things. Even more 
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abstract is the notion of informational or recordkeep- 
ing space, but one's imagination can see a volume that 
includes qll the records that concern one s life. 

If one envisions a "Space"— whatever kind it is— as 
a physical volume, then one can also envision an intru- 
sion or entry into such a space. If there are negative or 
undesirable consequences of such an bitrusion, they 
can be cataloged and separated into annoyances, 
those that constitute harm, and those that should be 
overlooked or ignored. The total effect of the harmful 
ones will constitute the definition of what "hurt" or 
"injury" or "damage" means for the space in ques- 
tion. In turn one can then decide how to legally deal 
with each space and its intrusions and further dis- 
cover where legislative actions or judicial insights are 
needed. % ^ 

Try some examples to validate the construct First 
consider ones that might be called sensory spaces; the 
most obvious is visual space. It includes what the 
eyes see, and the most severe intrusion is probably 
blindfolcfing. Others include flashing bright lighft, 
the display of objectionable material; or critical writ- 
ten attacks. Consequents of such intrusions include 
sensory deprivation, mental (lisorientation- especially 
if the frequency and brightness of a flashing light is 
just right, annoyance, anger, or damage to reputa- 
v tion. Some of these consequences would be actionable 
under existing law perhaps even as an aggressive act. 
Under some circumstances intrusion of morally objec- 
tionable material before the eyes might be considered 
an invasion of privacy, whereas written things before 
the eyes might come under defamation law, but in this 
particular instant it would be different for a public 
official and perhaps not actionable. 

Another of the sensory spaces would be the aural 
space which is the totality of what is heard by the 
ears. Typical intrusions would include loud stereo 
playing, casual conversation, excessive noise levels 
such as in a factory, the general background clamor of 
a city or factory, shouted remarks or obscenities. The 
i consequences of intrusion of Aural privacy would 
range from none through annoyance to physical 
damage or pain to psychological disturbances or 
anger. Some of thetn would be legally actionable as a 
public nuisance or as noise pollution; others would not 
be actionable, whereas some would fall under the 
purview of the Occupational Safety and Health 
Administration. 

Intrusions into one's physical space would include 
standing close, sitting on the same bench, physical 
pressure in a crowd, touching and fondling, or the 
ultimate intrusion of bodily seizure or confinement 
The consequences would range from annoyance to 
physical discomfort, to psychological malaise, to sex- 
ual approach or mortification, or to bodily harm. 
Some of these would be actionable under the laws of 
assault, sexual molestation, perhaps public nuisance, 
unlawful seizure or falsj) imprisonment Some of the 
physical intrusions might be spoken of as privacy 
invasion under some circumstances, e.g., when one in- 
dividual sits down on another's parkbench; many in- 
trusions will be categorized otherwise. Finally, with 
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respect to recordkeeping space, intrusions would in- 
clude such things as misuse of information, improper 
dissemination of information, or collection of inap- 
propriate facts.. Consequences would include embar- 
rassment, denial of credit, or destruction of reputa- 
tion, among others. Generally, the privacy invasion of 
recordkeeping space is actionable under various 
federal and state laws. 

„ While these examples certainly do not exhaust all 
possible dimensions of privacV in the general issue, the 
approach does seem to circumvent the ethical and 
moral hurdle by implicitly involving both in the proc- 
ess. This approach also seems to properly include the 
role of case law. but let us develop these last two points 
more fillip 4 

In the suggested construct, namely of defining inva- 
sion of privacy rather than privacy itself, the first step 
would be to conceptualize or identify a space of con- 
cern. The second step would be to identify possible in- 
trusions into the space; one should note that such a list 
could be amended as events occurred or became impor- 
tant to society. The third step would be to identify the 
consequences of such intrusions: here the moral and 
ethical views of society can be pnfcerly involved. Next, 
one would determine what "hurt" or "injury" or 
"damage" is for* a&ch of the intrusions or conse- 
quences; again, the moral and ethical views of society 
clearly would be at Work. Also, the cumulative effect of f 
case law would establish self-adapting definitions of 
the three as society changes, or as moral and ethical 
views evolve. The final step is thert the question of 
legal actionability; clearly^the overall judicial process 
and legislative attention tyoulxf be folded in. 

The validity of such a "fia*ikend-to" procedure is en- 
capsulated in the following series of points. 

• Rather than conceive a very broad definition of 
privacy that can umbrella all the many varia- 
tions on the privacy theme, 

• it concentrates on events and relates them to 
societal views, morals, and ethics as exemplified 
through the legislative and judicial processes. 

• It is a phenomenological approach that concen- 
trates on events rather than causation and thus, 

it tracks and reflects usage of technology rather 
than a priori proscribing acceptable boundaries 
for it. 

• It can accept as part of the overall framework 
any legal actions that are appropriate to the 
hurt e.g.. recover damages, penalize the perpe- 
trator, or enjoy) the perpetrator. 

• Furthermore, it can accommodate expressions 
of concern by society in behalf of individuals as 
well as individuals in behalf of themselves, or 
even society in behalf of its institutions and 
organizations. 



Finally, the proposed construct— or taxonomy for 
privacy— might be used as an analytical framework for 
perceiving the privacy consequences of some new use 
of technology, or for identifying areas where legis- 
lative'attention is needed. For this purpose one would 
decide what spaces some new service might intrude, 
imagine the intrusions and consequent hurts, and 
design safeguards or laws to protect against them. For 
example, a new service such as delivering many forms 
of information over the cable-TV network might in- 
vade visual, aural, recordkeeping, psychological and 
perhaps other spaces. In considering the privacy effect 
of some new technological aprftation, onewould have 
to stitch together the various cHnensions of privacy in- 
vasion that the technology might impose, and perhaps 
each of them wkfuld have to be dealt with separately 
under law, judicial action, or social pressure and 
norms. 

Here then is a possible way to consolidate and relate 
the rhany dimensions of privacy. It appears sound in 
terms of the examples given, but on the other hand, all 
of them have been in the context of an individual. 
Ifiere may neeJh to be a somewhat different set of 
spaces and intrusions when considering all of society 
or organizations. There is no pretense that the task or 
producing a grand construct for privacy is completely 
finished. Hie totality of all intrusions into all spaces 
could be catalyzed under appropriate branches of law 
or under various specific categoric laws. From a philo- 
sophical point of view, one must ask about the various 
dimensions of hurt or injury. Should it, for example, in-* 
elude denial of right-of-action where such a right is 
presumed to be one of personal choice? Should it in- 
clude negative impact, mortification, or shame? Exist- 
ing privacy law could profitably be examined together 
with other pertinent law to see whether significant 
legislative gaps exists and, if so, whether attention is 
needed. If nothing more, the point of view offered in 
this paper is at least a different way to think about 
privacy. 

Belatedly, one notes that in the proper context the 
famous words of Justice Brandeis still prevail: " Pri- 
vacy the right to be left alone." Now, ' however, 
"alone" must be integrated to mean "alone in*a 
physical sense," or "alone in a visual sense," or "alone 
in an aural sense," or "alone in a recordkeeping sense" 
or "alone in , " It would appear that the words 
which really launched societal concern about privacy 
are still quite valid if only interpreted to mean: alone in 
the broadest sense. Even so. however, fuller amplifi- 
cation of Justice Brandeis 1 words would be necessary. 
What does "left alone" mean? Freedom, or perhaps 
protection, from intrusions other than those per- 
sonally, socially, or legislatively sanctioned? What 
does "broadest sense" even mean? Perhaps the notion 
of a space— which is a concept borrowed from the 
physical sciences— together with an easily grasped 
idea of intrusions into a space, can usefully add scope 
and fullness to an insightful idea expressed many 
decades ago. 



